HidekiBin Support - Revision history

Hsaito: /* Isn't JavaScript based crypto bad idea? */

2017-02-27T09:57:10Z

‎Isn't JavaScript based crypto bad idea?

Hsaito: /* Did you make it? */

2017-02-27T09:55:45Z

‎Did you make it?

Hsaito: /* How does it work? */

2017-02-27T09:55:36Z

‎How does it work?

Hsaito: /* Is this possible to specify IP address to access to the service? (As opposed to relying on DNS?) */

2017-02-27T09:51:18Z

‎Is this possible to specify IP address to access to the service? (As opposed to relying on DNS?)

Hsaito: /* Why is the site not using SSL/TLS? */

2016-04-28T23:39:51Z

‎Why is the site not using SSL/TLS?

Hsaito: /* I try to post Burn After Reading message to Facebook and even the first person accessing gets expired message */

2015-10-18T09:23:12Z

‎I try to post Burn After Reading message to Facebook and even the first person accessing gets expired message

Hsaito: /* I try to post Burn After Reading message to Facebook and even the first person accessing gets expired message */

2015-10-18T09:22:46Z

‎I try to post Burn After Reading message to Facebook and even the first person accessing gets expired message

Hsaito: /* Is this possible to specify IP address to access to the service? (As opposed to relying on DNS?) */

2015-08-24T10:20:53Z

‎Is this possible to specify IP address to access to the service? (As opposed to relying on DNS?)

Hsaito: /* Why is the site not using SSL/TLS? */

2015-01-25T08:31:31Z

‎Why is the site not using SSL/TLS?

Hsaito: /* Is it logged? */

2015-01-19T03:42:02Z

‎Is it logged?

← Older revision		Revision as of 09:57, 27 February 2017
Line 51:		Line 51:

	But keep in mind there are a lot of other ways way worse and less obvious things that malicious parties can do to compromise your security, such as key logger, screen captures and other data on your computer. Use of HidekiBin won't help you protect against such attacks.		But keep in mind there are a lot of other ways way worse and less obvious things that malicious parties can do to compromise your security, such as key logger, screen captures and other data on your computer. Use of HidekiBin won't help you protect against such attacks.
−
−	~~If you are in doubt, I invite you to attempt to verify [http://hidekibin.hidekisaito.com/js/ HidekiBin JavaScript] files with [http://help.hidekisaito.com/hidekibin/jssign signature by myself].~~

	====What it should not be used for====		====What it should not be used for====

@@ Line 26: / Line 26: @@
 ====Did you make it?====
-No, I do not claim ownership of the code, as it is an adaptation of [http://sebsauvage.net/wiki/doku.php?id=php:zerobin ZeroBin]. HidekiBin may be incorporating some original changes, but they are usually for cosmetic changes that does not affect core functionality.
+No, I do not claim ownership of the code, as it is an adaptation of [https://privatebin.net/ PrivateBin]. HidekiBin may be incorporating some original changes, but they are usually for cosmetic changes that does not affect core functionality.
 ====How does it work?====

@@ Line 30: / Line 30: @@
 ====How does it work?====
-The system is based on ZeroBin. The system supports all the features [http://sebsauvage.net/wiki/doku.php?id=php:zerobin ZeroBin] supports.
+The system is based on ZeroBin. The system supports most of the features [https://privatebin.net/ PrivateBin] supports.<ref>Most of, because HidekiBin does not support file upload, for example.</ref>
 ====How can it be used?====

← Older revision		Revision as of 09:51, 27 February 2017
Line 24:		Line 24:

	If you use [http://chrome.google.com Google Chrome], there is a [https://chrome.google.com/webstore/detail/hidekibin/lajfamdikjjifolocnajaojbfofngblk Chrome Application] for HidekiBin.		If you use [http://chrome.google.com Google Chrome], there is a [https://chrome.google.com/webstore/detail/hidekibin/lajfamdikjjifolocnajaojbfofngblk Chrome Application] for HidekiBin.
−
−	~~====Is this possible to specify IP address to access to the service? (As opposed to relying on DNS?)====~~
−
−	~~Yes, if you have IPv6. Use: <tt>http://[2607:f298:5:101f::7f:8ea2]/</tt>~~

	====Did you make it?====		====Did you make it?====

@@ Line 46: / Line 46: @@
 * Writing a love letter you are not going to send
-====Why is the site not using SSL/TLS?====
+====Does the site support SSL/TLS?====
-From December 2014, this site supports SSL/TLS. Point your browser to <tt>https://hidekibin.hidekisaito.com</tt>. However, because it is using [[wikipedia:Server Name Indication|SNI]] based SSL/TLS, older browser may not work.<ref>Use of [https://letsencrypt.org Let's Encrypt] certificates are being planned once it's available.</ref>
+From December 2014, this site supports SSL/TLS. Point your browser to <tt>https://hidekibin.hidekisaito.com</tt> and is now plain text access is no longer supported. However, because it is using [[wikipedia:Server Name Indication|SNI]] based SSL/TLS, older browser may not work, however if you are using a browser so old that SNI is not supported, you shouldn't be on the Internet for obvious security reasons.
 To protect you further, you can add hidekibin.hidekisaito.com to your own [[wikipedia:HTTP Strict Transport Security|HSTS]] list on chrome by navigating to <tt>chrome://net-internals/#hsts</tt>. Inclusion request to the official HSTS list is not considered at this time as it is not possible to register, just sub-domain as opposed to base domain. By accessing HTTPS version of the site, compatible browser will set HSTS policy that lasts for seven days, thus you will have the same effect as if you have done the process above for next seven days.

← Older revision		Revision as of 09:23, 18 October 2015
Line 76:		Line 76:

	In addition, some messaging system like Skype may have the same issue. So no, you can't do "first one to visit..." campaign using HidekiBin. You may want to use short expiry instead.		In addition, some messaging system like Skype may have the same issue. So no, you can't do "first one to visit..." campaign using HidekiBin. You may want to use short expiry instead.
		+
	In contrary, you will be able to use this feature to see if the message is ever intercepted and accessed by the system in transit. For example, there was a case Microsoft was found red handed snooping the content of allegedly encrypted Skype messages. These problems can be easily detectable as a legitimate destination will no longer have an access to the message.		In contrary, you will be able to use this feature to see if the message is ever intercepted and accessed by the system in transit. For example, there was a case Microsoft was found red handed snooping the content of allegedly encrypted Skype messages. These problems can be easily detectable as a legitimate destination will no longer have an access to the message.

← Older revision		Revision as of 09:22, 18 October 2015
Line 76:		Line 76:

	In addition, some messaging system like Skype may have the same issue. So no, you can't do "first one to visit..." campaign using HidekiBin. You may want to use short expiry instead.		In addition, some messaging system like Skype may have the same issue. So no, you can't do "first one to visit..." campaign using HidekiBin. You may want to use short expiry instead.
		+	In contrary, you will be able to use this feature to see if the message is ever intercepted and accessed by the system in transit. For example, there was a case Microsoft was found red handed snooping the content of allegedly encrypted Skype messages. These problems can be easily detectable as a legitimate destination will no longer have an access to the message.

	====What URL shortener works with HidekiBin?====		====What URL shortener works with HidekiBin?====

@@ Line 27: / Line 27: @@
 ====Is this possible to specify IP address to access to the service? (As opposed to relying on DNS?)====
-Yes, if you have IPv6. Use: <tt>http://[2607:f298:5:103f::9d:26c9]/</tt>
+Yes, if you have IPv6. Use: <tt>http://[2607:f298:5:101f::7f:8ea2]/</tt>
 ====Did you make it?====

@@ Line 49: / Line 49: @@
 From December 2014, this site supports SSL/TLS. Point your browser to <tt>https://hidekibin.hidekisaito.com</tt>. However, because it is using [[wikipedia:Server Name Indication|SNI]] based SSL/TLS, older browser may not work.<ref>Use of [https://letsencrypt.org Let's Encrypt] certificates are being planned once it's available.</ref>
-To protect you further, you can add hidekibin.hidekisaito.com to your own [[wikipedia:HTTP Strict Transport Security|HSTS]] list on chrome by navigating to <tt>chrome://net-internals/#hsts</tt>. Inclusion request to the official HSTS list is not considered at this time as it is not possible to register, just sub-domain as opposed to base domain. By accessing HTTPS version of the site, compatible browser will set HSTS policy that lasts for three days, thus you will have the same effect as if you have done the process above for next three days.
+To protect you further, you can add hidekibin.hidekisaito.com to your own [[wikipedia:HTTP Strict Transport Security|HSTS]] list on chrome by navigating to <tt>chrome://net-internals/#hsts</tt>. Inclusion request to the official HSTS list is not considered at this time as it is not possible to register, just sub-domain as opposed to base domain. By accessing HTTPS version of the site, compatible browser will set HSTS policy that lasts for seven days, thus you will have the same effect as if you have done the process above for next seven days.
 ====Isn't JavaScript based crypto bad idea?====

@@ Line 105: / Line 105: @@
 I maintain five days worth of logs, and the system derives statistical information about the site. This is mainly to diagnose problems the service may be encountering. If you are in doubt, use Tor or VPN services.
-The full URL including key is not logged into the system, so it is mostly difficult (even impossible) for me to access to any of pastes submitted. (Unless, referring site has the full URL.) Specifically, the log will appear on my end like the following:
+The full URL including key is not logged into the system, so it is mostly difficult (even impossible) for me to access to any of pastes submitted. (Unless, referring site has the full URL.) Specifically, the log will appear on my end like the following. (I[ address is obfuscated from the actual log.)
 <blockquote>