Go to file
ksamuel c65d5c4d09
Merge pull request #142 from shashwata27/master
Fixing Typo
2021-03-28 22:00:55 +02:00
docs change meta description 2020-08-26 12:58:10 +02:00
zerobin Bumping to version 1.0.5 2020-08-31 17:25:50 +02:00
.editorconfig Bumping version, adding editor config file and a contribution section to the readme. 2014-06-22 11:00:05 +07:00
.gitignore [WIP] automating release 2020-08-31 14:26:14 +02:00
.pylintrc Add btc tip 2020-08-14 16:41:45 +02:00
LICENCE Add licence file 2020-08-12 16:52:47 +02:00
README.rst Fixing Typo 2021-03-28 17:06:22 +05:30
compress.sh [WIP] automating release 2020-08-31 14:26:14 +02:00
dev-requirements.txt Automate release to pypi 2020-08-31 15:58:53 +02:00
dodo.py Removing debug code from dodo file 2020-08-31 17:35:33 +02:00
pyproject.toml Add entry point, remove setup.py, add pyproject.toml, better default_settings 2020-08-19 11:58:10 +02:00
screenshot.png Migrate build system to pydoit 2020-08-18 13:26:29 +02:00
setup.cfg Add entry point, remove setup.py, add pyproject.toml, better default_settings 2020-08-19 11:58:10 +02:00
setup.py [WIP] automating release 2020-08-31 14:26:14 +02:00


0bin: a client side encrypted pastebin

0bin is a pastebin that encrypts the user content in the browser and can run without a database.

* Try it: `0bin.net <http://0bin.net>`_
* `Report a bug <https://github.com/sametmax/0bin/issues>`_

0bin allows anybody to host a pastebin while welcoming any type of content to
be pasted in it. The idea is that one can (probably...) not be legally entitled
to `moderate the pastebin content`_ as they have no way to decrypt it.

It's an Python implementation of the `zerobin project`_, created by sebsauvage, under the `WTFPL licence`_.

To run zerobin, download zerobin.pyz from the latest release_ then:


    python zerobin.pyz

0bin requires Python 3.7 or higher.

You may need to type :code:`py -3.7 zerobin.pyz` on Windows, or :code:`python3.7 zerobin.pyz` on Mac/Linux, depending on your configuration.

If you are familiar with the Python ecosystem, you can also :code:`python -m pip install zerobin --user` and run :code:`python -m zerobin` for the same effect.

How it works

When creating the paste:

- the browser generates a random key;
- the pasted content is encrypted with this key using AES256;
- the encrypted pasted content is sent to the server;
- the browser receives the paste URL and adds the key in the URL hash (#).

When reading the paste:

- the browser makes the GET request to the paste URL;
- because the key is in the hash, the key is not part of the request;
- browser gets the encrypted content end decrypts it using the key;
- the pasted decrypted content is displayed and sourcecode is highlighted.

Key points:

- because the key is in the hash, the key is never sent to the server;
- therefore it won't appear in the server logs;
- all operations, including code coloration, happen on the client-side;
- the server is no more than a fancy recipient for the encrypted data.

Other features

- automatic code coloration (no need to specify the language);
- pastebin expiration: 1 day, 1 month or never;
- burn after reading: the paste is destroyed after the first reading;
- clone paste: you can't edit a paste, but you can duplicate any of them;
- code upload: if a file is too big, you can upload it instead of using copy/paste;
- copy paste to clipboard in a click;
- own previous pastes history;
- reader mode;

Known issues

- 0bin uses several HTML5/CSS3 features that are not widely supported. In that case we handle the degradation as gracefully as we can.
- The pasted content size limit check is not accurate. It's just a safety net, so we think it's ok.

.. _moderate the pastebin content: http://www.zdnet.com/blog/security/pastebin-to-hunt-for-hacker-pastes-anonymous-cries-censorship/11336
.. _zerobin project: https://github.com/sebsauvage/ZeroBin/
.. _node.js: http://nodejs.org/
.. _is not worth it: http://stackoverflow.com/questions/201705/how-many-random-elements-before-md5-produces-collisions
.. _WTFPL licence: http://en.wikipedia.org/wiki/WTFPL
.. _release: https://github.com/Tygs/0bin/releases


We cannot accept contributions for the moment, and will ignore PR.