#隐私
200
2026-10-11
aindeev/agent-chrome-relay
S
Let your AI agents use your Chrome, signed in as you, in background tabs. By Alexey Indeev · blog: read.aindeev.com · X: @AlexeyIndeev
2026-09-23
jev-chat/jev-chat-jarvis
S
装在手机上的对话副驾：在微信 / QQ / X / 飞书里读懂对方、给出候选回复、一键填入输入框，发不发由你。非侵入，只读屏幕，不 hook 不改包。
2026-09-21
ghuntley/preflight
S
A local proxy that scans LLM requests and attachments for secrets before they reach the model.
2026-09-23
Show HN: Drop – A rootless Linux sandbox with gVisor support
A
I created Drop because I always felt uneasy installing and running third-party programs using my main user account. A single compromised dependency means a full compromise of the system. What is even worse, because I ship software from my computer, a single compromised dependency can lead to compromise of all the users of my software. Containers and VMs are one solution, but for local work, they are often detrimental to productivity. It takes effort to configure a machine with all the tools and configs needed for productive work, but a container or a VM will be stripped of all these tools. This is great for production deployments, where the aim is a reproducible system with minimal dependencies, but can get in the way of productive local work. Drop is language independent, but the workflow is inspired by Python's virtualenv. With virtualenv the environment isolation is only a convention that relies on installed dependencies being good citizens. With Drop the isolation is enforced. Each Drop environment gets its own writable and easily disposable home dir, with only selected config files and dirs from the original home mounted, mostly read-only. Drop uses Linux namespaces for isolation (user, mount, network, PID, IPC, cgroup), doesn't require root and, as an option, uses gVisor user-space kernel, which adds protection against exploiting host kernel vulnerabilities to escape the sandbox. I don't want to make the introductory post too lengthy, but I'm here to answer any questions and give any additional technical details. Note: This is my 3rd submission of the project, the first two did not draw attention. Since then I have added support for gVisor and created a project website to better explain the concept and organize documentation.
2026-09-29
Show HN: OpenAPPA – open-source deterministic guardrails that don't break agents
A
Hi Hacker News! Matvey, one of the authors, is here. While building enterprise agents, we ran into a problem: the more tools you connect to the AI, the higher the chance it will run out of control and leak sensitive data. Guardrails, in theory, should prevent this, but the situation is worrying: - Non-deterministic guardrails (LLM as a judge, auto modes, etc.) are vulnerable to prompt injections, or they lack knowledge of the data, making them inefficient (~10% data leaks on our benchmarks). - Existing deterministic guardrails (Cedar, OPA, FIDES, Dogwood) require massive case-specific IF-ELSE-like policies and break agents (~59% utility loss on our benchmarks). We did something differently. We’ve taken the best of existing deterministic guardrails and built a policy language that is data-specific, not use-case specific. It lets you scale agents without updating a policy. On top of that, we’ve added multiple tricks (like a remedy plan or a DualLLM pattern) to help agents operate within those restrictions, raising utility from ~40% to ~90% and making it the first deterministic guardrail that doesn't break agents. Finally, we’ve designed it to be pluggable into any agent loop with pre- and post-tool-call hooks. We invite you to check out our benchmarks: https://www.openappa.com/evaluation Play with it in Claude Code: https://www.openappa.com/claude-code Try plugging it into your agent: https://www.openappa.com/add-to-agent Or check the academic paper: https://arxiv.org/abs/2607.24625 We'd love to hear any feedback!
2026-09-03
dean9703111/data-deidentification
S
純前端文件去識別化工具：PDF/Word/Excel/TXT/Markdown 自動偵測個資、遮罩預覽、人工覆核、CSV 編碼表可還原，資料不出電腦
2026-11-04
1337isnot1337/DOPPLERGEIST
S
A tool to geolocate audio recordings using aircraft Doppler shifts and historical flight tracks.
2026-09-12
FankChen/tracecrate
A
Local-first AI agent trace workbench. Inspect Claude Code, Codex and OTLP logs, compare runs, and export privacy-conscious reports. No backend or API keys.
2026-09-11
xiaYuTian11/maskit
S
数据面具 Data Maskit — 专为大模型打造的本地隐私脱敏网关（请求自动打码，回复流式还原；支持 Cursor / Claude Code / Codex / Pi 等任意可配 Base URL 工具）
2026-09-06
Rion-Wu-tech/wechat-intelligence-hub
A
Local-first WeChat intelligence system with a read-only CLI, Codex skills, searchable chat history, daily briefings, follow-ups and opportunity tracking.
2026-10-13
lewispour/pulse-proxy-checker
A
⚡ Fast local proxy checker for HTTP/HTTPS/SOCKS4/SOCKS5 — live results with country, quality & risk, offline GeoIP, saved pools. Free & open-source (Tauri + Rust). macOS & Windows.
2026-10-11
rociiu/talorys
A
Your personal AI agent in your own Cloudflare account. Chat, memory, tasks, notes and scheduled reminders, deployed with one command: npx create-talorys@latest. Free-tier friendly, single-user, no telemetry.
2026-09-05
sudoingX/nopasswd-sudo
A
Time-boxed passwordless sudo for agents. Grants expire on a systemd timer, validated with visudo before install, audited with sudoreplay.
2026-10-21
Show HN: VoidAccess – open-source dark web OSINT, from query to a graph
A
Hi HN! Im Katriel, and im a Security Researcher/Enthusiast and in the wave of AI, i wanted to build that next gen of security tooling that surpasses the current tools, and even the paid industries with an open source engine. I built MailAccess as well, which is going to be the best damn email osint tool out there, in another year. But just before building MailAccess i built VoidAccess, because i was delving a lot into DarkINT and the content inside the dark web is too difficult to navigate through for a human, so i automated that pipeline, made sure the noise was removed, and anything NSFW was filtered out, to give the analyst an overview of what is present in the dark web, without having to actually go through it manually. Very simple to run, you just run a few commands to install, and a couple to investigate. Then the engine takes over, and stops onyl when the job is done(or at a particular time limit, if set by the user). Do check it out, if that is something that interests you. Thanks to the community for giving it the love it has got till now.
2026-10-07
abclq/home-dns-adblock
A
🏠 Home DNS ad-blocker for Chinese apps (红果短剧/番茄小说) — works at home AND away via Tailscale. 198 precise rules, zero false positives. 家庭 DNS 广告拦截，在家/出门都能用
2026-08-30
Zulwatha/content-parity
A
Measure what a website serves to machine readers. Fetches any page as several honest identities, including a cryptographically signed agent, and reports what each one received.
2026-10-25
xMazaki/unbloat-android-tv
A
Slim down any Android TV (ads, telemetry) + minimalist Apple TV-style home screen. Reversible, one double-click. 🇫🇷 Allégez n'importe quelle TV Android (pubs, télémétrie) + écran d'accueil minimaliste façon Apple TV. Réversible, en un double-clic.
2026-08-23
josiah-nelson/eidos
A
Private, intelligent search across every machine you own. Systems remain searchable when offline, including files buried inside VMs and archives.
2026-10-11
jameshaworthcs/countinghouse
A
Counting House: a private, local-first UK personal finance tracker. Statements in, git-versioned JSON out: estate value, spending, tax year and projections.
2026-10-07
Show HN: MailAccess – the true Email OSINT framework
A
Im a security engineer and i built mailaccess. When i started learning pentesting, i came across multiple lectures and notes of people listing out tools and websites, which gives the emails for a particular domain, and almost all of them mentioned that the tool might not stick, so its better to learn the methodology, rather than learning a tool- that stuck with me. As i was beginning to really get into pentesting i noticed a clear lack of email osint methodology through the tool itself - so i thought of building one myself. I researched email osint methodoliges and identity chaining in depth to really get this tool the exact brain that a human would use, the reasoning of each action and the scoring behind each of it. Then after learning i just put it all together, and people really liked ita nd supported it, because it gave the truth rather than just filling it with names, it doesnt give a list, it gives sections, where it came from and how. Thats exactly what i wouldve wanted when i was first learning, a tool that familiarizes with what each source gave, and what was found. Do check it out, i have made a hosted version so that people can route everything through that, and that also has been going very well, all thanks to the community and the solid supporters throughout. github.com/KatrielMoses/MailAccess
2026-11-02
Verlintas/NOIR
A
手机隐私审计：用 adb 扫出 Android 应用的权限、上报端点与数据流向，并给出可回滚的处置。Desktop Android leak audit: permissions, endpoints, data flows, reversible fixes.
2026-10-16
midagedev/mwoyeo
A
Live, in-place screen translation for macOS — a lens that rewrites the text under it in your language, on-device.
2026-10-15
MarketKernel/html-disasm
A
Offline disassembler for ARM64, ARM32, x86-64, x86 (32-bit), WebAssembly, .NET (CIL), and Java bytecode. Supports Mach-O, ELF, PE, APK, and IPA files from macOS, iOS, Linux, Android, and Windows. Runs entirely in your browser from a single HTML file. No installation, no internet connection, no file uploads.
2026-10-09
opennookorg/betterwispr
A
Free, open-source, local-first dictation app for macOS. Hold a shortcut, speak, and text is typed into any app. On-device speech-to-text with Whisper, Parakeet and Apple speech. Private, offline, open-source Wispr Flow alternative.
2026-10-08
izzy-Ti/fayda-mcp
A
A Model Context Protocol (MCP) bridge connecting AI agents to Ethiopia's Fayda National ID (MOSIP eSignet) for zero-trust e-KYC and identity verification.
2026-09-15
jsawyerdev/knowledgec-privacy-audit
A
See what macOS's hidden knowledgeC.db activity log has recorded about you, and clear it. Zero dependencies.
2026-08-25
FezVrasta/ha-rbac
A
Role-based access control for Home Assistant. Guests see the lights, kids get their own dashboard, nobody sees where your phone is.
2026-08-23
DavidCarliez/cover
A
Reversible privacy proxy for AI agents: send realistic fakes, restore originals locally.
2026-11-01
arpanjot-coding/AVault
A
AVault - Call Recorder (No Root Required) | Privacy-first, hardware-encrypted audio vault for Android 12-16+. Rootless call recording via Shizuku with AES-256-GCM, biometrics & auto-cleanup.
2026-11-01
nanami-0713/relay-kit
A
Out-of-the-box E2E relay server (relay-e2e/v1) for Cloudflare Workers — one-command deploy. Reference agent & client included. Distilled from Alma with permission.
2026-10-30
johncassil/dontallow
A
Auto-dismiss the macOS 'Allow X to find devices on local networks?' prompt. Presses Don't Allow for you, zero CPU idle, survives reboots.
2026-10-24
kiyoakii/xinliqiu-sdk
A
Unofficial SDK for the OPPO AI 心力球: pair from any computer, sync and decrypt your own recordings, optional ciphertext-only storage.
2026-10-09
ToiCF/CF-Workers-TGProxy
A
基于 Cloudflare Workers 的 Telegram Web/MTProto WebSocket 代理中继，支持 bridge 鉴权、bootstrap/session 令牌、多 lane WS 复用、AES-CTR 加密、自定义帧、流控与严格 CSP。
2026-10-02
Show HN: Breadcrumb, record everything on your mac + context manager for AI
B
Hi HN, I'm Justin. Breadcrumb records everything you do on your Mac (screen + meetings + AI transcripts + what you and your AI decided) and turns it into memory your AI can search. It's local and encrypted. You can also teach it rules by talking to it and it makes sure the right rules turn up in the right context. Works with Claude Code / Codex / Cursor / opencode. All of this is exposed to your AI as 30+ MCP tools (here's the definitions): https://innerloop.works/breadcrumb/mcp I started it in June because I wanted to understand what was going on with my AI dev work. Then it just kept growing as I jammed on it 10 hours a day for 3 months. I started by recording every screen so I could jump back to a moment and see what I'd been doing with the AI. Then I added MCP so the AI could search it. Then time tracking. Then meetings with transcripts and timestamped screenshots. After that I started feeding the data back in. At first it was just a few relevant memories in the prompt. Then I started adding rules and rules modules. Then I started recording the AI transcripts and all the other stuff the AI did (subagents, tools etc). I wanted a complete record so I could go back and see what the AI did and why. I found the more data the AI had the more useful it became. One example. I got off a zoom call with the team at the day job and said: "Review the meeting I just had, find all the bugs we discussed, and create JIRA tickets with screenshots." It read the transcript. Found every bug we mentioned, pulled the screens from the screen timeline, spun up my local server, diagnosed each bug, reviewed the code, created 14 tickets in JIRA with diagnosis and likely fixes, attached 12 screenshots as evidence, and created a nice Slack message to send to my colleagues. I never built a workflow for any of that. Claude had the meeting record, Breadcrumb tools, and rules I'd accumulated. It basically chained the steps together itself. My favorite thing about the system is observability of my own work as an AI developer. I can trace a bug all the way back to the first thing I said (or the first thing the AI did) that caused it. Then I can add a rule so it doesn't happen again. Anyway, my working system is simply Claude Desktop + Breadcrumb + Markdown. I find I don't need anything else. It's local software for one person. Local models for transcription and diarization. Data encrypted with SQLCipher and a passphrase. You can exclude any apps, websites, words and phrases. Breadcrumb itself only makes one network call which is a daily update check. (but of course your AI will use it and that is local or cloud depending on what you use). It runs cool about 12% of one core on average (M series mac has 8+). You can set it to just save OCR text or to save screenshots. If just OCR it's about 12mb day (a lot of telemetry, indexing etc). If you record screenshots on meetings it's about 120mb/hour (1 every 2 secs). It can also record screenshots of everything that's heavy at about 160mb/day. It does local classification/naming with ollama with Gemma 3 4B (2.5 GB). It's 100% free. There's no account you can just download and start using it. I'll monetize it via E2EE cloud sync and team sync. It's open beta. Just one developer working on it. Requires 16GB+ M Series Mac. Thanks for reading! https://innerloop.works/breadcrumb (homepage) https://innerloop.works/breadcrumb/download (direct download) https://innerloop.works/breadcrumb/mcp (mcp definition)
2026-09-21
arikchakma/opencloak
A
Swap the personal details out of your AI prompts before they are sent. On-device detection, no server, no account.
2026-09-17
Krimchanin/claude-vault
A
Keep Claude Desktop chats safe when switching accounts — local-first backup and restore for conversations.
2026-09-04
sheeshmohsin/lan-drop
A
Run it on a machine in your home network and phones on the same WiFi can transfer huge files (10GB+) straight to it — no cloud, no app install, resumable, zero dependencies
2026-11-09
paisu-supai/sonoba
A
画面の文字をその場で訳文に置き換える Windows 11 用の常駐アプリ。OCR も翻訳も PC の中で動きます（PP-OCRv6、PLaMo 3 Translate）。
2026-11-02
iiinno/OpenHinoVoice
A
Windows で使う日本語の音声入力アプリ。認識はローカル、整形は ChatGPT / OpenCode Go / OpenAI から選べる
2026-10-24
4noha/diy-fido-key
A
DIY USB FIDO2 security key on ESP32-S3 (pico-fido + ST7735 status display)
2026-10-20
zilvestro/grammai
A
AI writing assistance. Free & open source. Offline English and German grammar checks, with rewrites and translation through your own AI.
2026-09-23
jev-chat/jev-chat-windows
B
微信（Windows 4.x）旁挂的回复辅助：窗口截图 + 本地离线 OCR 读对方消息 → Jev 判断意图 → 3 条候选一键填入，发送永远手动
2026-09-05
0nicell/data-deletion-skill
A
A Claude skill for running structured personal-data erasure campaigns — 328 data brokers, OSINT tools and breach-search engines with verified privacy contacts, request templates for 13 privacy regimes, and escalation paths to 21 regulators.
2026-08-30
Show HN: Sesame - a local-first, open-source password manager
B
I have been working on Sesame, an open-source password manager that keeps your vault local by default. You don't need an account to create or use a vault, and the hosted service never receives the vault itself. It's still early software and the independent security review isn't finished yet, so I am mainly interested in feedback, testing, and people looking through the code. (Linux support is yet to be released on v0.1.2, but currently is in the works.)
2026-08-24
addition-official/ecobee-local
A
Local Ecobee control in Python via HomeKit. No cloud, no ecobee API key, no Home Assistant. Pair once, then read/control temp, mode, sensors, and more from a GUI, CLI, or library.
2026-08-23
Mahmud0808/TeleDrive
A
Android app that turns a private Telegram channel into personal cloud storage. Automatic photo backup, optional end-to-end encryption, and a full file manager.
2026-11-05
Hexay/dopplerprint
A
Work out where and when an audio recording was made using only the doppler bands in it.
2026-11-03
yt1988/who-are-you
A
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
2026-10-21
PZW152/one-click-eu-lord
A
一鍵轉生歐爺 · 一键转生欧爷 · One-Click EU Lord — give Windows 11 every gain from Ireland's EU/EEA (DMA) policy without the features the EU build removes, and keep it across updates. One 166 KB exe, no runtime, fully reversible. 繁中 / 简中 / English.
2026-10-21
VictorTran1023/tcl-tv-toolkit
A
国行 Android TV 调试与调优工具箱：ADB 授权、侧载、代理、去广告、状态 HUD | China-market Android TV toolkit: ADB auth, sideload, proxy, debloat, status HUD
2026-10-07
jinrunsen/claude-my-privacy
A
MyPrivacy: local name and company pseudonymization for Claude Code, with restoration for tools and assistant reply display.
2026-09-24
hamada-emam-tech/nafath-php
A
Nafath identity verification for PHP — web redirect and app-push, with the traps the official docs leave out already handled.
2026-09-20
ayandexyz/glance-linux
A
Face unlock for Linux with real liveness detection: a PAM module, a daemon, and an Omarchy lock screen indicator
2026-09-09
SpinnerAppreciate/glm-flash-offline-client
B
Offline desktop client for GLM-5.3-Flash — run private, local chat sessions without a server connection.
2026-09-06
TheCruZ/BootViewer
A
Windows Measured Boot viewer & TPM verifier. See exactly what your PC measured at boot. Decode the Windows TCG/TPM event log, explain each entry, verify PCRs against the real TPM and spot tampering, Secure Boot issues or unexpected drivers.
2026-11-09
Z1Code/iCopy
A
Copia de seguridad de iCloud Fotos para Windows: completa, verificada y sin cortes.
2026-11-02
mofan6/Moect
A
Windows 微信 4.x 聊天记录导出、备份与离线归档工具 · WeChat chat history exporter & backup. 支持好友/群聊、头像、图片、GIF 表情、音视频、文件、链接、小程序、引用回复和合并转发；支持 HTML、JSON、JSONL、TXT、CSV、Markdown 导出、批量任务、消息搜索及时间筛选，提供一键安装包。
2026-10-30
soimy/c3rb3r-rescue
A
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
2026-10-16
FiloSottile/cobblestone.ts
A
A TypeScript implementation of Cobblestone-128 chunked encryption, available as an npm package or as a bundled .js file.
2026-10-11
DaneelOlivaw1/macos-wechat-export
A
macOS 微信 4.x 本地聊天记录导出：临时重签副本取钥 + SQLCipher 只读（Apple Silicon）
2026-10-05
cneuralnetwork/kharcha
B
Private spending ledger from bank SMS, built with Expo and optional encrypted Render backup.
2026-09-23
yoheinakajima/glance
A
Ask an open vision-language model typed questions about an image and get probabilities back, on your own machine.
2026-08-31
k7cfo/remove-your-data
B
Agent-first skill: remove your data from brokers without paying. Paste this URL into a coding agent.
2026-10-24
IrvingGuerra/lglow
A
LGlow: bring your old LG TV back to life. A clean, fast, ad-free home screen for rooted 2019 LG TVs (webOS 4.5). Installer, guides in English and Spanish, and before/after.
2026-10-22
jss8649/quiet-tizen
A
Native Quiet Home launcher, reversible cleanup tools, and an agent-readable guide for the Samsung U8000F running Tizen 9.
2026-10-21
0xProbabillity/luma-tv
A
A calm, tvOS-inspired home screen for Android TV and Google TV. No ads, no tracking.
2026-10-19
Fazmin/cve-intel
A
Local security intelligence for CVE triage - 31 data sources and 32 tools, risk scores and an MCP server for AI agents, all in native Rust. Private by default.
2026-10-16
touri-ai/touri
A
touri: open-source desktop app for AI agent bots (Codex, Claude, OpenCode) with isolated VMs, browser and computer use.
2026-09-24
mgriesslehner/SafariKeePassXC
A
Safari Web Extension that connects to KeePassXC via its browser integration protocol
2026-09-20
Oldcircle/geo-sleuth
B
An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.
2026-09-19
LingxiangXu/traceclause
B
Local-first document requirements and evidence review workbench with traceable citations and human review.
2026-09-05
dahlia/coffer
A
Native Linux client for passwords and other credentials stored in Apple Passwords (formerly iCloud Keychain)
2026-09-04
collabray/wisense
A
WiFi CSI human sensing for Python presence, fall detection, breathing rate, activity classification, and occupancy counting from an ESP32. No camera, no cloud, no PyTorch/CUDA at runtime.
2026-11-08
arnold117/iOS-NOIR
A
No-jailbreak iOS privacy, entitlement, sandbox & telemetry forensic auditor (inspired by Verlintas/NOIR)
2026-10-26
elithrar/samshush
A
Root your Samsung TV and turn off the microphones, ads & other questionable services.
2026-10-25
ythx-101/old-phone-tailnet
A
把没有 root 的旧安卓手机接进 Tailscale 私网：Termux + 用户态 Tailscale + 只认公钥的 SSH + 本机无线 ADB + Chrome 调试口。附提示词和 Claude Code skill。
2026-10-19
stkoecn/im-mcp
A
Fast, local, read-only MCP Server for WeChat (4.x/3.x) & DingTalk (7.x V2/V3) chat history with FTS5 search
2026-10-14
youngxkk/transnap-oss
A
A free, local-first macOS menu bar translator built with Apple Translation and SwiftUI.
2026-10-02
tani/skkmonkey
A
A local SKK Japanese IME for Firefox and Chrome, written in TypeScript and built with Node.js. Runs as a userscript; no server is required and typed text is never sent over the network.
2026-10-02
zoolapp/aime
A
艾么输入法 · An open-source Chinese input method for macOS, built on RIME. Local first, optional AI.
2026-09-05
affirmitv/cc-readback
A
Read your Claude Code sessions from Claude Desktop. A local, read-only MCP server over ~/.claude with secret redaction.
2026-09-03
livenson/umbrik
A
CDOC2 encrypted containers in Rust — the Estonian .cdoc2 format. CLI, library and Python bindings, with ID-card support via PKCS#11.
2026-09-01
alotiho/osintPanel
B
Open-source OSINT panel for WHOIS, IP geolocation, email, and SSL certificate lookups — with a bundled desktop UI.
2026-08-23
batmanpriv/404DPI
A
404DPI is a Go local proxy built around adaptive TLS ClientHello fragmentation with strategy learning, plus SOCKS5, DNS-over-HTTPS, QUIC handling, TLS-fingerprint controls, domain fronting, per-domain profiles, and a local diagnostics/monitoring dashboard.
2026-10-26
andrisgauracs/who-said-what
B
macOS app: drop a podcast or video, get a transcript with every line assigned to a speaker. On-device, built on Desert Ant Labs' Who + Apple's speech transcriber.
2026-10-09
wireztna/wireztna-oss
B
Open Source, Self-hosted Zero Trust Network Access (ZTNA) built on WireGuard. Fine-grained per-user access to private resources — no domain required.
2026-09-23
Calcium-Ion/AstrLink
B
A local AI gateway for AI agents, unifying your subscriptions and API providers with smart routing and on-device privacy protection.
2026-09-23
aimardcr/ReCam
B
Android virtual camera for security testing. Injects frames into cameraserver so any app sees a video file, desktop stream, or webcam instead of the real camera.
2026-09-08
pfz14/chatgpt-model-meter
B
Chrome MV3 extension for chatgpt.com: shows 5h/7d quota, and checks the requested model against the model_slug the server's STE telemetry reports as actually executed.
2026-09-06
1etu/actual-fingerprints
B
Deterministic synthetic fingerprints from a seed. Zero dependencies, Node.
2026-09-03
piyushxt43/sayszz
B
Your voice, at your cursor, in milliseconds. Free, open-source, 100% on-device dictation for macOS — Metal-accelerated Whisper, one-key hotkey, local history with stats. A Wispr Flow alternative that never phones home.
2026-08-25
HotStartLabs/glassbox
B
Client-side browser-fingerprint bench — see what any website can measure about your browser, and how identifiable you are. Live: https://glassbox.codecanary.org
2026-11-05
marselnenaj/omarchy-yubikey
B
Touch-to-authenticate sudo, Polkit and screen unlock for Omarchy, with guided setup and optional GNOME Keyring unlock.
2026-10-29
R44VC0RP/query
B
Let coding agents ask you for secrets in a floating macOS prompt instead of in chat
2026-10-16
Palladiymateria/sharecheck
B
Local CLI that checks your project for accidental secrets, sensitive files, and oversized assets before publishing to GitHub. No uploads. No runtime dependencies.
2026-10-14
Show HN: Pulse Local, a Mac budgeting app whose AI models run on your machine
B
Hi HN, I'm Niz. Pulse Local is a budgeting app for Mac (Apple Silicon, beta) that answers questions about your spending with models that run on your machine. Local mode needs no account. The ledger and your questions stay on the machine, and the app sends no analytics or crash logs. I felt there are not enough consumer apps that run locally with no calls to the outside world that help us manage sensitive corners of our lives. This app in its local variant only downloads a couple of models and occasional updates, it does not send any analytics nor data. Features-wise, Pulse local is a complete budgeting app that offers an assistant built on top of a fine-tuned model and thousands of rules embedded in the code itself. I'm sharing it for free with options to help me continue experimenting with fine-tuning and expanding along this direction. How it works: you import a CSV from any bank, in any currency. When you ask a question, a tuned Qwen3 0.6B model reads it into a structured query, and code, not the model, does the money math against the ledger. A 4B checker model double-checks each money answer; when the two readings disagree, the app says it is not sure instead of guessing. That change took wrong answers from about one in five to 5 in 494 questions across our last three tests. The write-up covers how we test, the designs that failed, and the limits of the claim: https://pulseos.finance/pulse-local/writing/agree-or-not-sur... The tuned weights are on Hugging Face (PulseOS/pulse-local-qwen3-0.6b). Limitations: the first start downloads about 2.9 GB of models. With the checker on, a money answer takes 12 to 14 seconds (you can turn the checker off). Small models can still misread an open-ended question. The app answers in English. Mac only for now; Windows is next. The app is free. An optional Connected mode (Sync Pass, $29/year) syncs US banks through Plaid; transactions pass through our server's memory and are not stored. Feedback welcome, especially on wrong answers and on questions it should handle but does not.
2026-10-12
andrisgauracs/wifi-sensing-kit
B
Teach three $10 ESP32-S3 boards to recognise what you're doing from WiFi alone, with your webcam as the teacher
2026-10-10
Show HN: Apogee: Rebuilding Mozilla's Orbit, fully local and private
B
Hey everyone! Last year, Mozilla released Orbit, an AI-powered browser summarizer hosted on a GCP server. After people started digging into the extension, they discovered things like backend endpoints such as store_result. Eventually, Mozilla discontinued the project. For the past month, I’ve been trying to rebuild Orbit from scratch, but with one major difference: Apogee is fully local and privacy-focused. Apogee doesn’t send or store your data. It can directly connect to your local Ollama instance for inference. I’ve also added WebGPU integration for Chrome and Transformers.js for Firefox to provide faster, local responses. It can summarize: Articles and websites, YouTube and Billie videos, Wikipedia articles ,Hacker News and Reddit threads. Install Apogee: Chrome: https://chromewebstore.google.com/detail/apogee/pgemlpomhkdc... Firefox: https://addons.mozilla.org/en-US/firefox/addon/apogeeext/ Obviously it is far from complete. Would love to hear your feedback and suggestions!
2026-08-23
rushiranpise/sorry-google
B
Minimal stub APKs that block Google from automatically installing or updating unwanted system apps. Each stub declares the same package name as the target app but is signed with a different key, causing a signature mismatch that prevents the original from being pushed.
2026-11-07
dreampiggy/nearby-recovery-eacs
B
Experimental macOS Nearby Recovery EACS client and research notes; one observed iPadOS 18.6.2 version-preserving erase.
2026-10-27
hyperbob-labs/hyperlang
B
Run untrusted Erlang inside an Elixir host, on the same BEAM, with no ambient authority.
2026-10-19
interplains/zero-breach
B
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
2026-10-15
deeeeone/gitdrive
B
Turn GitHub into an iCloud-style drive for macOS. Native Finder integration, files on demand, real git history, Git LFS, and optional ML-KEM + X25519 encryption where GitHub sees only random data.
2026-10-15
marska/adguard-atlas
B
Self-hosted live world map of your network's DNS queries, drawn from the AdGuard Home query log. One Docker container. Not affiliated with AdGuard.
2026-10-12
Shishir-ip/AppDNS
B
Automatically switch Android's Private DNS (DNS-over-TLS) based on the app you open. No VPN, no tracking, open source.
2026-10-02
zeugmaster/find-my-nuts
B
Proof-of-concept ESP32 Cashu wallet with Find My transport and a host receiver
2026-09-28
webKing021/paperlight
B
Every document on your PC, one search away. Find PDF, Word, Excel and PowerPoint files by name, folder or the text inside. Fast, private, read-only. Built with Tauri + Rust.
2026-10-20
finereli/whatsapp-mcp
B
A read-only MCP server that lets your AI agent search and read your own WhatsApp messages. Runs on Cloudflare Workers.
2026-10-17
remnient/romulus
B
Lean 4 hypervisor memory ownership model with machine-checked isolation proofs
2026-10-16
cobanov/freeband
B
Read your Xiaomi Smart Band 10 / 10 Pro on iPhone without Mi Fitness or a Xiaomi account.
2026-10-15
Show HN: I wrote an email app that accepts only one sender per inbox
B
Infinite inboxes, including prefixes where you don't have to create inboxes before you use them -- they self create when you add a suffix. Three types of inboxes: - One sender. Locks to the first domain to send email (except gmail, outlook, etc where it locks to an email account for obivous reasons. It bounces everyone else. - Temporary. Lasts for a while (24h, 7days, etc) then bounces. Received messages stay or go as per your choice. - Prefix. The most powerful. Declare a prefix like "service" and then invent any suffix, like "service-netflix" or "service$bank" and it creates a new one-sender inbox locked to whoever wrote first. Bring you own domain. Bring your own AI (MCP server ready). Forwarding. Please help me test it.
2026-10-09
actuallyzefe/welp
B
Your boss didn’t need to see that. Welp stops you before you send to the wrong chat.
2026-10-05
hashcott/ghostline
B
One-click encrypted DNS (DoH/DoT/DoQ/DNSCrypt), DPI bypass with zapret2 or GoodbyeDPI, a local HTTP/SOCKS proxy with TLS fragmentation, and domain rules for Windows. ~30 MB RAM in the tray, no telemetry, always restores your original DNS. For research and educational use.
2026-09-13
valleytechsolutions/Flock-Noir
B
A IR Flock Detector & Wardriver with the Seeed Studio ESP32-S3 Sense. Using the OV3660 with no IR lens allows you to detect flock cameras at night through IR that will use the gps to log the location and alert via buzzer saving in a wigle format CSV to the SD Card.
2026-09-10
sashyo/minidauth
B
Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.
2026-09-06
KonradIT/storiesclient
B
Third party Android client for Meta/Facebook Ray-Ban Stories (stella) smart glasses. Get Meta out of your face!
2026-09-05
programasweights/pii
B
Detect and type PII locally with one ProgramAsWeights neural program.
2026-08-25
d4ncboz/technocore
B
Decentralized Ed25519 Cryptographic Identity, Signed Message Bus, and Proof-of-Contribution Framework for AI Agents on Technocore ( Ecosystem)
2026-11-04
ef1m03/kordon
B
Kill switch для приложений: замораживает Claude, ChatGPT, Cursor, Telegram и другие программы при смене сети или IP
2026-11-03
0xCodez/pulsr
B
Pulsr — open-source recovery, strain and sleep coach for Apple Watch. Liquid Glass UI, on-device, no subscription.
2026-10-24
Show HN: Making a smart TV dumb and then smart
B
GitHub anubhavmalhotra/r2d2-tv ★49 · Local home screen, private remote browser, and push-to-talk voice assistant for webOS TVs · A recent (unwanted) webOS update that got installed on TV prompted me to start going down the rabbit hole of writing new TV software. After a couple of weekends and massive help from 4 different models, finally managed to get v1 working. My daughter enjoys navigating TV through speech while I get to browse on the biggest screen at home. While all of the code was written by ML models, there were decisions I had to help with. In specific: using WebRTC to cut down latency, repurposing vendor logic for buffering voice samples and designing user experience. It was liberating to finally free the TV of bloatware and make it truly personalized!
2026-10-12
Show HN: BraiNOTES, handwritten notes on your lecture PDFs in a browser tab
B
In August, I posted here about TeXbrain, a LaTeX editor that runs completely in the browser, with no need for an account or server. (I didn't excpect it to get that much feedback, bug reports and help from here!) This is the same idea for the other half of my studies, the handwritten notes. I take them on a convertible laptop, and I've had a hard time with apps for that, taking notes from a device to another, exporting as PDF, needing an account for many of them, etc. So I've been working on the version of it that I always wanted. Open a tab, the slides of the lecture or multiple PDFs open next to the page or even become the page, write on them with my pen, and nothing ever leaves my browser. braiNOTES is a static website and has no backend. Strokes are perfect-freehand outlines which support pen pressure, the PDF files are rendered by pdf.js in a worker, and for storage it uses IndexedDB a moment after every change. No account, no analytics, and completely offline and local-first. You can export notebooks as .brainotes files, which in the background is a zip with one json per page + the PDFs and pictures you import. It keeps the original pages and puts the vectorized ink on top, this way the text stays selectable in the slides. You can try it here: https://notes.swimmingbrain.dev GitHub Repo: https://github.com/swimmingbrain/brainotes (MIT) In Study mode, the PDF opens on the side of the tab, you can read it simultaneously to the notes, snip a formula or diagrams directly into the notes with the snip tool, and then write around it. In Board mode, you have just a Whiteboard for tutoring or simply for more place for exercises, and can also highlight or draw things with the laser pointer tool while presenting. The line of the ink appears the moment the pen moves, and a one euro filter calms shaky hands while you write + a light a refit when you lift the pen. I also have a video editor and an animation tool which are still a work in progress, on the same GitHub profile. I'm also working on a MCP server for each tool, so you can use your MCP client to do further things with your notes, automatically edit videos on the video editor, etc. That feature will of course be off unless you turn it on and will only be able to talk to localhost. I've used this tool for every lecture in the last few months and a few friends use it too. Bug reports, fixes, recommendations, feedback are all welcome!
2026-10-08
darek-margas/wifi-association-presence
B
Home Assistant presence detection from Wi-Fi access point association tables: a device is home while it is associated (joined) to one of your APs, not merely seen in ARP or a switch's MAC table. Pluggable AP drivers: D-Link DAP, UniFi (via Home Assistant's UniFi integration) and OpenWrt.
2026-10-01
1molchuan/edge-smart-doh
B
DoH that gives Cloudflare-hosted sites measured preferred IPs (per ISP, from cfhub) and ECH
2026-10-01
CluvexStudio/ZedSecure
B
Multi-core VPN client for Android and desktop: Xray, sing-box, Psiphon, Tor, DNS tunnels, WireGuard/AmneziaWG, OpenConnect, IKEv2
2026-09-30
Lex-au/chatgpt-receipts
B
Chrome extension that shows which model actually answered each ChatGPT reply, and flags it when you get rerouted.
2026-09-25
cookieyes/cookiebannerbench
B
An open benchmark for what consent banners cost the pages they sit on — time to banner, payload, viewport blocked and page stability, measured on identical pages.
2026-09-17
cyancity/easy-unlocker
B
Secrets management for AI agents: approve API keys and credentials on your phone with biometrics, delivered end-to-end encrypted into the target process. Plaintext never enters the chat, logs, or relay.
2026-09-16
romanrublev/turnrelay
B
Tunnel UDP through WebRTC TURN relays (VK Calls and others), disguised as call media, routed by sing-box
2026-08-31
aimen08/noty
B
Sticky notes that live at the edge of your screen. Native macOS, SwiftUI + AppKit, local-only with encrypted note bodies.
2026-08-25
MaxHu-xuan/chat-archive-guard
B
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
2026-11-02
yetone/alma-relay
B
Self-host the relay for Alma Remote Access — control your desktop Alma from your phone, anywhere. Docker or Cloudflare Workers.
2026-10-29
MchinaMd57764/CVE-2026-112706-CoreMedia-fd-leak
B
Independent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5–27.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.
2026-09-25
georgeding/Relate
C
记得她说过的每一句话，也记得你答应过的每一件事。A self-hosted AI chief of staff for your chats — remembers what they said and what you promised.
2026-09-25
kurzemnek/transgran-monstr
B
Обезличивает выгрузки CRM перед отправкой в нейросети. Телефоны становятся хешем, склейка выживает.
2026-09-25
Show HN: Air-gapped file encryption as self-decrypting HTML page
C
Air-gapped file encryption packed into a single, self-decrypting HTML page. Repo: https://github.com/ApelegHQ/ts-cms-ep-sfx I was inspired by self-extracting archives. I wanted to share files with basically no dependencies. The goal was: 1. Something that didn't require any installation (assuming a web browser) 2. Have a single file with no network that could self-decrypt 3. Be fully auditable The second point is done by having (sort of(*)) reproducible builds and embedded OpenPGP signatures. The first point is made by cleverly manipulating the HTML structure so that it can decrypt without breaking the PGP signature. It can even decrypt using bare openssl (which was a design goal too, though getting the exact structure right took some work and bug reports). The third point is accomplished by the first two, and by the source being freely available. (*) Depends on the OS at the moment.
2026-09-23
jev-chat/jev-chat-jarvis-mac
C
微信消息意图识别悬浮窗（macOS）：看屏 + 本地小模型判断意图和风险，再按话术生成回复候选。纯只读、不注入微信。
2026-09-17
Inling-AI/privacy-router
B
Local AI privacy routing: discover sensitive content, review once, enforce registered decisions on future requests.
2026-10-23
lasharor/cleanyourtv-WebOS
B
A clean home screen for rooted LG webOS TVs, with an optional debloat of LG's ads and telemetry.
2026-10-14
MidZai/aman_check
B
Dated, honest condition report for a used Mac: locks, battery, SSD, configuration and guided hardware tests. Native macOS app, nothing leaves your Mac.
2026-10-02
Hamidooh/witness-vault
B
Zero-install, air-gapped, self-decrypting HTML vaults using AES-256-GCM and native WebCrypto.
2026-09-29
wxk66/private-diary
B
A fully offline, calendar-style private journal — PWA + Android APK. No account, no network, bilingual (中文 / English).
2026-09-25
jankeesvw/omarchy-meeting-recorder
C
Record meetings on Omarchy: mic and computer audio as two tracks, transcribed on your own machine, with speakers, chapters and a player.
2026-08-31
SamsonRuan/Photo-Insight
C
A privacy-first native macOS app for locally scanning, organizing, and analyzing photo EXIF, GPS, equipment, and shooting patterns—with customizable scan profiles.
2026-08-30
scholarlybat/Offline-Scanned-Document-Translator
B
Offline PDF OCR Translator for Windows — extract text from scanned PDFs and images, translate locally, preserve document layout, export translated PDF/DOCX/TXT, process folders in batch, and use custom terminology glossaries.
2026-08-24
mohityadav8/ai-watermark-remover
B
Reveal & strip hidden AI marks - invisible Unicode, C2PA/EXIF/XMP metadata from text and files you own
2026-11-07
imsai-sh/fish-pocket
B
Run DeepSeek Harness on iPhone and iPad, with a fully native SwiftUI interface. No computer, no server. 在 iPhone 和 iPad 上本机运行 DeepSeek Harness，界面完全原生。
2026-11-07
q1054710965/tiny-image
B
轻图 Tiny Image — 在浏览器本地批量压缩图片，无需上传、无需安装。A private, offline-ready image compressor.
2026-11-04
Arcanum-Sec/SpikeStrip
B
Reversible HTML and JavaScript prompt decoys with opaque per-insertion keys.
2026-10-30
Cygnux-Labs/PCM-protocol
B
Proof-Carrying Messages: a protocol for AI agents whose claims carry evidence the receiver checks offline
2026-10-24
chiotas/lightkeeper
B
A calm Home screen for LG TVs on older webOS, made to sit beside GlassHouse
2026-10-22
vvalencian/XGB430vProDigiDecrypt
B
Script Python que inicia sesión en tu router XGB430vPro de Digi, se descarga la configuración, la descifra y te muestra las credenciales de administrador, PPPoE y SIP.
2026-10-16
Administracion-Abierta/AutoFirme
C
Client-side-rendered SPA: sign and verify documents with X.509 certificates, entirely in the browser. No backend, no key material leaving the client.
2026-10-12
enlivatech/unictrl-oss
B
Move your pointer from a Mac onto a Windows PC and back; the keyboard follows. Native SwiftUI + WinUI 3, encrypted over your LAN. GPL-3.0.
2026-10-06
rakesh0x/OpenCardboard
B
OpenCardboard — local-first chat-to-edit AI video editor. Your footage never leaves your machine.
2026-10-04
Malmen877/prata
B
Prata: lokal svensk tal-till-text i webbläsaren. Local, private Swedish speech-to-text.
2026-09-16
Technicalflight/AiGuard
B
AiGuard —— 本地优先的 AI 流量安全网关：本机 MITM 代理只接管 AI 域名，请求侧脱敏、响应侧流式还原，并识别七类风险信号。原文不落盘、不上传。（注意如果你需要模型直接使用token或者其他密钥进行操作，请放入白名单或关闭该功能！！！！）
2026-09-12
yizhiyonggangdexiaojia/xjvpn
B
Root Android transparent proxy client powered by Mihomo, with per-app routing and domain auditing.
2026-09-05
bentossell/bg-gone
B
Remove image backgrounds locally, in the browser or from the terminal. Nothing is uploaded.
2026-11-04
brightsongwrath/personal-data-deletor-osint
B
Ask 970 data brokers to delete your data. Free, local, no account, no server.
2026-10-29
Forem0/ENGRAM
B
Find what remains. A local desktop app for inspecting photos, documents, secret candidates and traces in selected files and supported backups. Tauri + React, shared Rust engine.
2026-10-19
Show HN: WhatsApp MCP running free on Cloudflare
C
I wanted my humble Claude on mobile to access my WhatsApp messages but the only options I could find either required WhatsApp Business or an actual server to run Baileys on. I wanted to run it for free on ClaudeFlare and with my personal WhatsApp account, so I built this. Important feature - it connects to your Google account as well as WhatsApp to grab the names of all your WhatsApp contacts, otherwise you get only phone numbers for many of them and search doesn't work properly. This is a single user install because it's both gray area and very private - so point your agent at the repo and let it set things up.
2026-10-07
Mustafa-KhanDev/relay
B
Terminal-native multi-room chat — one Node process, a fast Ink TUI, and AES-256-GCM encrypted rooms.
2026-09-22
AMLChecker/monero-web-wallet
C
Self-hosted, non-custodial Monero (XMR) web wallet: dark responsive UI on top of the official monero-wallet-rpc. Keys stay on your machine, two-phase sending with explicit fee review, Windows quick start.
2026-09-18
pasteich/cdn-tunnel
B
TCP/UDP tunnel over a CDN (SOCKS5 + HTTP/2) with password auth, GET/POST/stream transports and an Android VPN wrapper
2026-09-06
Drotfix/ghunt-panel
B
A local, self-hosted web UI for GHunt — mxrch's OSINT framework for investigating Google accounts. ghunt-panel wraps the ghunt CLI in a small Flask app so you can run lookups, read the results, and manage your login session from a browser tab instead of a terminal.
2026-08-29
7sStudio/shhh-app
B
One tap to hush your phone — a tiny, ad-free Android quiet-mode toggle with a Quick Settings tile, home screen widget and timed hush. Jetpack Compose + Material 3 Expressive. No accounts, no analytics, no internet permission.
2026-08-24
fivetaku/tikeytaka
B
Central API key vault for Claude Code — encrypted cloud-synced vault, zero sign-up, auto-wire keys into projects
2026-08-23
khydrogenous/lightspeed
C
Light Speed is a cross-platform, peer-to-peer, end-to-end encrypted social app for text and media. Messages are encrypted on-device, relayed directly between peers, and deleted after a single view. No moderation, no accounts, no server-side content.
2026-10-26
andrisgauracs/eye-photo-sorter
B
Drop a folder of photos; Desert Ant Labs' Eye sorts them into receipts, screenshots, documents, pets, blurry, eyes closed and duplicates, entirely in the browser (LiteRT.js, WebGPU).
2026-10-21
Mr-Neutr0n/webos-home
B
A reversible native Home screen for rooted webOS, with firmware guards, rollback and Tailscale setup.
2026-10-20
aradhyas8/Plume_Launcher
B
🪶 A lightweight, ad-free launcher for Android TV and Google TV. 0.4 MB, no tracking, no ads. Downloader code: 2125356
2026-10-14
LovelyTeams/LovelyCarve
B
a forensic carver with a soft heart · 基于 Rust、Tauri 2 与 Vue 3 的桌面磁盘取证与数据恢复工具：只读解析镜像、文件系统与加密卷，提供原类型预览、全局搜索、时间线、文件雕刻与插件分析
2026-10-14
hoanghanhdevvn/GMS-Protect
B
GMS & FCM Protection for Xiaomi HyperOS China ROM | Auto • No Root • No ADB • MiPush/Greezer Protection • Battery Friendly
2026-10-08
tangrow1105/dns-otg
B
Unofficial Android app to manage your Control D DNS on the go: profiles, filters, services, rules, endpoints, statistics and the live activity log.
2026-10-02
ssssssanjiu/gleaner
B
Gleaner (拾穗) — collect full-resolution images, video with sound, and audio from any web page. Zero telemetry, local-first browser extension.