Pastebin a security nightmare

Fasterthannothing · July 6, 2019

Ok if this doesn't belong in tech news feel free to move it. I saw someone saying you could see current things pasted to pastebin so I went digging turns out you can see a lot of stuff. Infact they have a section on their website labeled archives and on that page you can see live pastebins and the information. For example in less than 10 min I found a hack to get people's discord information in Roblox, over 2k emails and passwords, an internal link to a big data website owned by Uber (I don't know where the link went I didn't go to it) and login info to lots of NordVPN customers. This is a major security concern that needs to be brought up.

https://pastebin.com/archive

iKingRPG · July 6, 2019

Oh wow

flibberdipper · July 6, 2019

So... You found stuff that Pastebin is typically used for.... Congrats?

Fasterthannothing · July 6, 2019

5 minutes ago, flibberdipper said:

So... You found stuff that Pastebin is typically used for.... Congrats?

This shouldn't be typical all they need to do to fix this is get rid of the ability to see people's pastebins without at least a link (really it should be a link and a pin). The fact that you think this is ok and normal shows how lax we have allowed companies to be with our data.

Phas3L0ck · July 6, 2019

Just now, Shorty88jr said:

This shouldn't be typical all they need to do to fix this is get rid of the ability to see people's pastebins without at least a link (really it should be a link and a pin). The fact that you think this is ok and normal shows how lax we have allowed companies to be with our data.

F**K that. This is freedom of speech 101.

U don't like it, just don't look at it.

Phas3L0ck · July 6, 2019

I just think it's too bad this "archive" page doesn't show entire pastes up front. no, you have to open the link to see the text. Don't think I'm lazy, I click links here all the time to see what they are, but hardly find anything worth looking at. Other stuff I simply don't understand like code pastes (I'm sooo not a programmer at all)

Aimi · July 6, 2019

Uh... these are pastes that users kept as public. It's not "a security nightmare" if your user chooses to make their paste a public one.

Sauron · July 6, 2019

6 hours ago, Shorty88jr said:

Ok if this doesn't belong in tech news feel free to move it. I saw someone saying you could see current things pasted to pastebin so I went digging turns out you can see a lot of stuff. Infact they have a section on their website labeled archives and on that page you can see live pastebins and the information. For example in less than 10 min I found a hack to get people's discord information in Roblox, over 2k emails and passwords, an internal link to a big data website owned by Uber (I don't know where the link went I didn't go to it) and login info to lots of NordVPN customers. This is a major security concern that needs to be brought up.

https://pastebin.com/archive

No, it's not a security concern. If that stuff is out there it's not pastebin's fault - if someone pasted it there it was already public information or at least would have been through another platform.

6 hours ago, Shorty88jr said:

This shouldn't be typical all they need to do to fix this is get rid of the ability to see people's pastebins without at least a link (really it should be a link and a pin).

No, that's not what pastebin is for. It's clearly stated that your paste will be public. If you've pasted private information into pastebin that's your fault.

6 hours ago, Shorty88jr said:

The fact that you think this is ok and normal shows how lax we have allowed companies to be with our data.

No, the fact that you think this is a problem shows you have no idea what you're talking about. If you pasted private information on this forum or any other public platform would you expect the forum to only show your thread to those who have a direct link?