ZeroBin, opensource Pastebin where the server has zero knowledge of pasted data
It's not really true that (due to the data being encrypted client side) your data is safe even if someone were to gain control of the server. It's something often claimed by these "Host Proof" style services.<p>As long as you are downloading the client side code from the server, someone just needs to make a small change to the javascript and they get access to your data.<p>Only if you can trust the code, and then make certain that the code does not change, is your data truly safe from the host.<p>Cortesi (<a href="http://corte.si" rel="nofollow">http://corte.si</a>) has done some interesting writing on the subject. <a href="http://corte.si/posts/security/hostproof.html" rel="nofollow">http://corte.si/posts/security/hostproof.html</a><p>He implemented a similar service (<a href="http://cryp.sr" rel="nofollow">http://cryp.sr</a> + <a href="http://corte.si/posts/security/crypsr.html" rel="nofollow">http://corte.si/posts/security/crypsr.html</a>
), and also worked on creating a browser addon that would verify a webpage against a known hash (<a href="https://github.com/cortesi/apphash" rel="nofollow">https://github.com/cortesi/apphash</a>).<p>Here are a couple of HN submissions on cryp.sr which have some discussions on the "Host Proof" concept:<p><a href="https://news.ycombinator.com/item?id=1438552" rel="nofollow">https://news.ycombinator.com/item?id=1438552</a><p><a href="https://news.ycombinator.com/item?id=1226277" rel="nofollow">https://news.ycombinator.com/item?id=1226277</a>