HN Explorer

15 comments

[ 3.0 ms ] story [ 46.3 ms ] thread
jokethrowaway
Nice and clean!

I feel like the biggest issues with pastebins are:

- Data is known by the provider - Not enough economic incentive to keep the pastebin running for a long time (you still need pocket money and some maintenance to keep it running)

GOATS-
0bin, another popular Pastebin alternative, solved this problem by encrypting the paste on the client and embedding the key in the paste URL - so the server had no idea about the data being posted.
sli
If the key is just in the URL, what's stopping them from simply obtaining the key out of their access logs and decrypting whatever they want?
leesalminen
Presumably they’re placing it in the # part of the url, which isn’t passed to servers by browsers. Now, of course, the client could still exfiltrate the key with client side JS, but that would be noticeable to anyone that wanted to check.
corbezzoli
The biggest issue with pastebins is definitely not that. Look into why most pastebins close doors (hint: people aren’t nice)
juliend2
After reading "A love letter to Deno"[1] I think I might actually start installing deno apps like this one on my home server.

Not only because they would be more secure by default, but also because Deno apps don't seem to need/want to be dockerized. Which means less overhead.

Not sure if it's a cultural thing or just some features of Deno that make Docker less necessary.

[1] https://matklad.github.io/2023/02/12/a-love-letter-to-deno.h...

zja
> Deno apps don't seem to need/want to be dockerized. Which means less overhead.

Why do you say that? I can’t think of any reason a Deno project wouldn’t benefit from Docker more or less any other application. There’s an official Deno Docker image, so I wouldn’t say that not using Docker is a part of Deno culture.

But I could see the single executable being easier to use than Docker if you’re just trying to run a script on a home server!

JLCarveth
The original commenter could be referring to Deno's permission system being similar to Docker's sandboxing, which could be true; I am not familiar enough with Docker to confirm that.

Personally, I tend to run my Deno/Node services using simple SystemD services rather than using docker or running the executable as-is.

fiddlerwoaroof
I was looking around for a pastebin a while back, and I realized that a self-hosted pastebin is way too much overhead for a simple problem: easily serving possibly-highlighted rich text to people. I already have an editor I like for _writing_, so the problem becomes a matter of hooking into the editor’s syntax highlighting to generate equivalent JavaScript. A quick htmlize + tramp hack later, I could serve my current emacs buffer with the world:

https://fwoar.co/pastebin/3daaf7ce49ca221702c70b0d10ac5caec8...