ftwca paste.debian.net

--FgqYVfyj4KrkXNdU
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,=20

over christmas I found the time and motivation to update some things on
paste.d.n.. The backend of paste.debian.net has been updated to use Mojolic=
ous
(yeah no rewrite, sometimes you have to adjust your goals to reality).=20

This update introduces several technical and policy changes:

Authentication: Now integrated with Salsa (GitLab) SSO. That also allows yo=
u to
manage your old pastes. I also took the opportunity to simplify some code a=
nd
removed the old "cookie" remember feature.

Rate Limits: Authenticated users bypass automated (some) spam validation and
have relaxed rate limits.

Privacy: Public indexing is disabled; all pastes are now hidden by default.

Spam Mitigation: iocaine has been deployed to block AI scrapers. Users can =
now
flag pastes as spam for manual review. I also added some new spamfilters and
internal admin boards that allow me to easily review, delete and ban things.

Retention: Strictly capped at a maximum of 90 days. To often paste.d.n was
misused distributing files, ransomware and so on.

API: The legacy XML-RPC API is retired and no longer available. Sorry for
breaking things (especially grml-paste), I wasn't aware someone is still us=
ing
it. Tools like pastebinit that use the form directly will continue to work

Source Code: Development has moved to Salsa: https://salsa.debian.org/formo=
rer/paste-pl

Upcoming URL Changes (Mid-February 2026)

Once all legacy pastes have expired (expected mid-February), the URL struct=
ure
will be simplified. The /hidden/ path segment will be removed, and all past=
es
will be accessible via: https://paste.debian.net/<id>

Thanks

Alex

--FgqYVfyj4KrkXNdU
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEbjlmweHRXblz0FtJHkX4yp3iOxYFAmlgFPgACgkQHkX4yp3i
OxaeIA/+M1l+iVEwq1lXtYRU4vfnhpHpWbn3XnqXdeckQYgd/QndLmIe7Fu6C8xG
NZIm8AHICmn++V0FqzoQWHccghpWEmzVzL0YvrWH8y0RyYB5dLuo1U4hs+AE0X8Y
8Wd6WHdXWSWljrX6ApvowqVgIWLCJMNH6W6To0MSw7tYEKVtyo1WMDCU+x47OM1y
hnWQXzc91kBLGpaHpDkgoj/mbyRTn2fEBoyeYVfrRbIIOw/ZD++9CcGHqZptXpJ5
HxNXUqh6RjPyxeCR3ycY2geMT994+PGNIxRG8sfKs81IxGO3vStrtFwzPjM5ZRmw
BZLOSAJGCJqiJEsM7UF2LNltR1nIlzSO2pWg4OoGZnxs4Z7T6xclqIQWvTw8vIXM
lnWrts4BNEAFHBuvC/po+xNuLw3Ia1gHWfjYpt9AxG6hEnGBzxFpv2XeLQ0Och4D
6dzyCRjVXeUClz5FOm2Qgb9NE4mk6qP+kZwCanAOWt6Dm2AkLcIYmToyaULQrL8O
v6+LTZG1+yhUwm2N6OYhTuRw1A7Brf3F3ptzn+2egQcLZhFb0erVOntsF/IXZHD2
TgivTgwcPNwarIdYFDxYraf9I5CMk8ehnHTL9sdep9+WldSKw7BF07mFjFNXwd2l
tgq7xbrBaZZ9PibP961qAPQ3dtMZrqkV0XWLbeNbMaw345Wl6Gw=
=Urqd
-----END PGP SIGNATURE-----

--FgqYVfyj4KrkXNdU--