Sebsauvage
sebsauvage.net · Personal blog · on HN since 2011
Sebastien Sauvage writes about small self-hosted web tools he built, including Shaarli, ZeroBin, and a feed reader, plus networking notes.
What HN saysHN commenters recommend Shaarli for bookmarks and ZeroBin as a pastebin that keeps encryption on the client side.
32HN people shared it
26linked it in comments
7stories submitted
408story points
1 year agolast shared
2011people per year2026
Most-shared posts
- 1Zerobin – pastebin clone with zero knowledge of hosted data11 people · 8 points · first shared 2012 · discussion on HN
- 2ZeroBin, opensource Pastebin where the server has zero knowledge of pasted data9 people · 218 points · first shared 2012 · 71 comments on HN
- 3Shaarli: Self-hosted del.icio.us alternative6 people · 85 points · first shared 2013 · 29 comments on HN
- 4Links3 people · first shared 2013
- 5Anonymous posts usernames and passwords of US Congress staffers1 people · 96 points · first shared 2013 · 70 comments on HN
- 6Punching Holes into Firewalls1 people · 1 points · first shared 2025 · discussion on HN
- 7Rhaa1 people · first shared 2018
- 8Webgobbler1 people · first shared 2013
- 9Doku1 people · first shared 2013
- 10Rha 20130317 kriss 6.jpg1 people · first shared 2013
- 11Doku1 people · first shared 2019
- 12Pombo1 people · first shared 2011
- 13Rha 20130317 kriss 5.png1 people · first shared 2013
- 14Doku1 people · first shared 2014
- 15Index1 people · first shared 2020
What HN people wrote when they linked it
subbz · 2017-04-26
Bookmark managers should happen in the browser, not in the command line.
I recommend Shaarli: http://sebsauvage.net/wiki/doku.php?id=php:shaarli
geal · 2013-06-14
From what I see:
* everything is done server side -> trust issues
* no encryption, just indexed by a hash -> that means the messages are not store encrypted on the server
I would recommend people stay away from your solution, and instead use something like Zerobin: http://sebsauvage.net/paste/
It encrypts everything using SJCL, and if I am worried with the server sending me a modified version of the JS code, I can still keep the code on my own computer but use it to send to the server.
sebsauvage · 2013-04-19
Did you try Kriss Feed ?
Opensource, single php file, fast, no database needed, works great on mobiles, keyboard shortcuts, OPML import/export...
https://github.com/tontof/kriss_feed
Screenshots:
http://sebsauvage.net/rhaa/images/201303/rha_20130317_kriss_5.png
http://sebsauvage.net/rhaa/images/201303/rha_20130317_kriss_6.jpg
I love it.
ruxkor · 2012-05-23
while the "spyglass" idea is nice, i'd prefer having at least some kind of client encryption in order to avoid the trust issue mentioned by ChuckMcM.
ZeroBin (http://sebsauvage.net/paste/) did an excellent job regarding that topic imo.
iamthedata · 2013-02-21
Gratz, Shaarli is pretty cool. Diigo is quite decent, but now I rather run Shaarli on localhost. Archival feature would be great, even if it just shells out to httrack. If used on a local machine, the disk space is not a great concern.
With 0.0.40 beta, I was having the problem about "Wrong login/password" and "Wrong token". It would be great if you could apply the fix described by this user:
lgaggini, 2012/11/10 18:59, http://sebsauvage.net/wiki/doku.php?id=php:shaarli:discussion
> I host last beta of shaarli (0.0.40) on my local network and I access it by custom name defined in clients hosts file and relative virtual host configuration in my nginx web server. My browser is Chromium (22.0.1229.94 (161065)). After the first configuration, every time I try to login I receive the Wrong login/pass error. After some investigation and debugging I discover a problem with cookie management (only in Chromium, in Firefox all work flawlessly). With the default code and Chromium, the cookie is correctly written by the browser, but it's not retrieved so all checks performed on sessions value (mainly tokenOK() and isLoggedIn()) fail. To fix I have to replace, in the main code index.php, the session cookie path parameter, from dirname($_SERVER[“SCRIPT_NAME”]).'/' to dirname($_SERVER[“SCRIPT_NAME”]) (short story, i remove the trailing /). I hope to help someone else with similar problem. Regards and keep up the good work.
littlestymaar · 2025-08-16
I've been using Shaarli[1] for the past 15 years, and I'm very happy with it. The code base is small and stable enough (the official version hasn't got a single update over the past 12 years, even though the author is still using it daily[2]) you can easily tweak it to your tastes.
[1]: https://github.com/sebsauvage/Shaarli
[2]: https://sebsauvage.net/links/
mro_name · 2022-05-12
especially neat when a crypto key like at https://sebsauvage.net/wiki/doku.php?id=php:zerobin
shazron · 2021-06-01
Checkout Zerobin (now privatebin). No database required, has expiry. All decryption/encryption in the browser.
zerobin: https://sebsauvage.net/wiki/doku.php?id=php:zerobin
privatebin: https://privatebin.info
BiteCode_dev · 2020-11-10
> This seems like HP is acting anti-competitively
I believe that they are and that it's not just a feeling. Some of their printers also used to tell your cartridges were empty before they were.
Printer breaks very fast and support don't really help you: https://sebsauvage.net/streisand.me/matronix/index.php?20200603_070634… (french).
Their policy on recurring payment is also pretty damning: https://www.eff.org/deeplinks/2020/11/ink-stained-wretches-battle-soul…
garaetjjte · 2018-05-26
Decryption is very slow for some reason. In comprasion http://sebsauvage.net/paste/ works instantaneously.
sametmax · 2017-03-12
If you can read french, http://sebsauvage.net/links/ is a nice generalist IT blog.
I'm the author of http://sametmax.com. And I like to brag, saying it's probably the highest quality blog on python. And I mean it. But it's in french and also talk about porn so you've been warned.
just_observing · 2016-09-26
I have an install of zerobin which I use for keys, items that I would prefer not to email but it does not support files, just text. Essentially it's a pastebin.
"TL;DR: ZeroBin is a minimalist, opensource online pastebin/discussion board where the server has zero knowledge of hosted data. Data is encrypted/decrypted in the browser using 256 bits AES."
http://sebsauvage.net/wiki/doku.php?id=php:zerobin
test at http://sebsauvage.net/paste/
bigbugbag · 2016-09-22
Why not use a real database ? Files are slow !
Do browsing this page feel slow ? Try browsing older pages, too.
It's not slow at all, is it ? And don't forget the database contains more than 16000 links, and it's on a shared host, with 32000 visitors/day for my website alone. And it's still damn fast. Why ?
The data file is only 3.7 Mb. It's read 99% of the time, and is probably already in the operation system disk cache. So generating a page involves no I/O at all most of the time.
http://sebsauvage.net/wiki/doku.php?id=php:shaarli#why_not_use_a_real_…
rakoo · 2015-02-25
If it's text only, there's also zerobin (http://sebsauvage.net/wiki/doku.php?id=php:zerobin) that has a lot of features and the added bonus of not storing the key on the server (it's using the anchor part)
dtbx · 2014-06-26
Make a html, embed the images in base64 using mhtifier.py, and rename the html as doc. Word will open it without problems.
Further instructions:
http://sebsauvage.net/wiki/doku.php?id=word_document_generation
Diederich · 2014-05-20
I might have missed it, but has HN done any kind of review of zerobin? http://sebsauvage.net/wiki/doku.php?id=php:zerobin
gesman · 2014-05-16
Is that similar to zerobin (http://sebsauvage.net/wiki/doku.php?id=php:zerobin) where server has no knowledge of the content of a message?
jernst · 2014-05-09
Shaarli is pretty good. http://sebsauvage.net/wiki/doku.php?id=php:shaarli
Have been running it on my Indie Box since I moved my data home from delicious in January. http://indieboxproject.org/
yoha · 2014-02-08
Just like ZeroBin [1] does: verifiable Javascript file uploaded to client. It is far from perfect, but at least some control of what is sent to the server is given to the client.
[1] http://sebsauvage.net/wiki/doku.php?id=php:zerobin
jstalin · 2013-01-30
I also like Zerobin, which encrypts in the browser so no cleartext is saved on the server:
http://sebsauvage.net/paste/
Of course, it's not SSL, but the source is available online and you could create your own implementation using SSL (as I have).
sturmeh · 2012-05-21
This was on HN previously, but not at this domain, they said the key generation and link formation was performed client-side, at no point does the key get sent to the server.
You send the encrypted message to the server and the javascript serves the url that combines the client side key and the servers uid for the paste.
See: http://sebsauvage.net/paste/
munin · 2012-04-12
see: http://sebsauvage.net/wiki/doku.php?id=php:zerobin
the "pasting" and "opening" sections cover this
nodata · 2011-12-08
Nice to see some competition to Prey (http://preyproject.com/) - but how does it differ?
They link to French pages. English link here: http://sebsauvage.net/pombo/
Any chance of getting this into the Fedora/Ubuntu repos? Prey isn't in Fedora...
grumph · 2018-08-28
If you don't know it, take a look at Shaarli[1], it's a bookmarking web app that allows you to share your bookmarks via RSS, you can add tags and comments, but you can also have "notes" without a link that can be used as microblogging posts.
It's a project from Sebsauvage[2] (an old school french blogger), who wanted to build a social network around the RSS technology.
I know there are projects around it to aggregate multiple shaarli and use it as an actual social network based around sharing links with RSS. I didn't search about it, but it seems that shaarlo[3] is one of them. EDIT: actually, projects like this are listed in shaarli's documentation[4].
EDIT2: tt-rss-shaarli seems to be what you want, Tiny-Tiny RSS with Shaarli, an aggregator with a sharing/commenting functionality.
[1] https://github.com/shaarli/Shaarli
[2] http://sebsauvage.net/wiki/doku.php?id=php:shaarli
[3] https://github.com/DMeloni/shaarlo
[4] https://shaarli.readthedocs.io/en/master/Community-&-Related-softw…
ikeboy · 2015-04-16
A quick search turns up http://0bin.net/, https://cryptbin.com/, https://cryptobin.org, https://defuse.ca/pastebin.htm, https://paste.sh, http://sebsauvage.net/paste/, and https://pastee.org/about.
Is there anything new in your implementation, or is this just "me too"?
drKarl · 2014-08-27
Nice... but I would prefer some self hosting alternatives, like Zerobin http://sebsauvage.net/paste/ (https://github.com/sebsauvage/ZeroBin)
or http://yaap.it/ (https://github.com/SeyZ/yaapit)
or even http://g0bin-demo.appspot.com/new/ (https://github.com/jyap808/g0bin)