From 485472b9f802be12641fa08314b2bf90ffd65bc9 Mon Sep 17 00:00:00 2001 From: "Alexander \"Arav\" Andreev" Date: Fri, 1 Jul 2022 04:19:29 +0400 Subject: [PATCH] Added mention of logging of file deletions in a privacy statements section. --- web/index.jade.mod.go | 2 +- web/templates/index.jade | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/web/index.jade.mod.go b/web/index.jade.mod.go index 52e6220..441cc18 100644 --- a/web/index.jade.mod.go +++ b/web/index.jade.mod.go @@ -17,7 +17,7 @@ const ( index__5 = `" max="` index__6 = `">` index__7 = `
` - index__8 = `

Upload

You can use cURL to upload a file: curl -F 'file=@somefile.ext' https://upload.arav.top

Over I2P: curl --proxy 127.0.0.1:4444 -F 'file=@somefile.ext' http://upload.arav.i2p

A resulted link looks like this: /f/base64rawURL(sha256)/filename.ext.

filename.ext is mandatory. It is a name the file will be retrieved with.

Delete

You can delete a file using cURL: curl -XDELETE https://upload.arav.top/

Over I2P: curl --proxy 127.0.0.1:4444 -XDELETE https://upload.arav.top/

Privacy statements

I WILL cooperate with law enforcements and provide them with logs, guess I shouldn't clarify why. Abuses should be sent to admin@arav.top.

Upload logs include: access time, IP-address, name of a file it was uploaded with, a SHA-256 hash of the file, download name*, size of the file in bytes, User-Agent.

Each download also being logged and include: access time, IP-address, name of a file it was requested with, download name*, User-Agent.

*Download name is a salted SHA-256 hash of the file encoded using base64 raw URL encoding. The hash is being salted to make useless any attempt of bruteforcing.

` + index__8 = `

Upload

You can use cURL to upload a file: curl -F 'file=@somefile.ext' https://upload.arav.top

Over I2P: curl --proxy 127.0.0.1:4444 -F 'file=@somefile.ext' http://upload.arav.i2p

A resulted link looks like this: /f/base64rawURL(sha256)/filename.ext.

filename.ext is mandatory. It is a name the file will be retrieved with.

Delete

You can delete a file using cURL: curl -XDELETE https://upload.arav.top/

Over I2P: curl --proxy 127.0.0.1:4444 -XDELETE https://upload.arav.top/

Privacy statements

I WILL cooperate with law enforcements and provide them with logs, guess I shouldn't clarify why. Abuses should be sent to admin@arav.top.

Upload logs include: access time, IP-address, name of a file it was uploaded with, a SHA-256 hash of the file, download name*, size of the file in bytes, User-Agent.

Each download and deletion are also being logged and include: access time, IP-address, name of a file it was requested with, download name*, User-Agent.

*Download name is a salted SHA-256 hash of the file encoded using base64 raw URL encoding. The hash is being salted to make useless any attempt of bruteforcing.

` ) func Index(mainSite string, storageCapacity, storageUsed int64, keepForHours int, fileMaxSize, storageUsedStr, storageCapacityStr, storageAvailableStr string, wr io.Writer) { diff --git a/web/templates/index.jade b/web/templates/index.jade index ba20cea..fca1767 100644 --- a/web/templates/index.jade +++ b/web/templates/index.jade @@ -42,5 +42,5 @@ block body h2 Privacy statements p I WILL cooperate with law enforcements and provide them with logs, guess I shouldn't clarify why. Abuses should be sent to #[a(href="mailto:admin@arav.top") admin@arav.top]. p Upload logs include: access time, IP-address, name of a file it was uploaded with, a SHA-256 hash of the file, download name*, size of the file in bytes, User-Agent. - p Each download also being logged and include: access time, IP-address, name of a file it was requested with, download name*, User-Agent. + p Each download and deletion are also being logged and include: access time, IP-address, name of a file it was requested with, download name*, User-Agent. p *Download name is a salted SHA-256 hash of the file encoded using base64 raw URL encoding. The hash is being salted to make useless any attempt of bruteforcing. \ No newline at end of file