Hacker News Reader

Good point and I'm also big on privacy.

But you could extremely easily wrap some End-to-End-Encryption around this, right?

In fact I might just try and do that when I find the time soon.

Before I made the web interface I had been using gpg to encrypt my pastes before sending them.

https://github.com/JLCarveth/nutty/blob/master/client.sh

The biggest issue with pastebins is definitely not that. Look into why most pastebins close doors (hint: people aren’t nice)

0bin, another popular Pastebin alternative, solved this problem by encrypting the paste on the client and embedding the key in the paste URL - so the server had no idea about the data being posted.

If the key is just in the URL, what's stopping them from simply obtaining the key out of their access logs and decrypting whatever they want?

Presumably they’re placing it in the # part of the url, which isn’t passed to servers by browsers. Now, of course, the client could still exfiltrate the key with client side JS, but that would be noticeable to anyone that wanted to check.