#密钥管理
200
2026-09-21
ghuntley/preflight
S
A local proxy that scans LLM requests and attachments for secrets before they reach the model.
2026-09-27
graygnatconsole/mcp-audit-tool
A
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + CI ready.
2026-10-23
golbin/rekey
A
Reissue an API key with one command and update it everywhere it is used (1Password + templates)
2026-09-23
Matthew0822/MCPBastion
A
Zero-trust security gateway between AI agents and MCP servers: scoped capabilities, redaction, rate and cost limits, and verifiable session logs.
2026-11-01
arpanjot-coding/AVault
A
AVault - Call Recorder (No Root Required) | Privacy-first, hardware-encrypted audio vault for Android 12-16+. Rootless call recording via Shizuku with AES-256-GCM, biometrics & auto-cleanup.
2026-10-23
Spectrmachina/Ztrust
B
Zero-trust supply-chain security for open source: detects malicious & vulnerable dependencies, typosquats, leaked secrets and unsafe GitHub Actions — and pays independent researchers in shielded Zcash via a front-running-proof bounty protocol.
2026-09-21
arikchakma/opencloak
A
Swap the personal details out of your AI prompts before they are sent. On-device detection, no server, no account.
2026-10-24
4noha/diy-fido-key
A
DIY USB FIDO2 security key on ESP32-S3 (pico-fido + ST7735 status display)
2026-08-30
Show HN: Sesame - a local-first, open-source password manager
B
I have been working on Sesame, an open-source password manager that keeps your vault local by default. You don't need an account to create or use a vault, and the hosted service never receives the vault itself. It's still early software and the independent security review isn't finished yet, so I am mainly interested in feedback, testing, and people looking through the code. (Linux support is yet to be released on v0.1.2, but currently is in the works.)
2026-09-07
austintgriffith/picowallet
A
A stablecoin hardware wallet from three Amazon parts, no soldering. Pico 2 W + LCD + ATECC608.
2026-10-17
CluvexStudio/Strata
B
An open-source file manager for Android: two panes, archives, APK and DEX editing, a code editor, network storages and an encrypted vault. No ads, no accounts, no tracking.
2026-10-16
FiloSottile/cobblestone.ts
A
A TypeScript implementation of Cobblestone-128 chunked encryption, available as an npm package or as a bundled .js file.
2026-09-24
mgriesslehner/SafariKeePassXC
A
Safari Web Extension that connects to KeePassXC via its browser integration protocol
2026-09-05
dahlia/coffer
A
Native Linux client for passwords and other credentials stored in Apple Passwords (formerly iCloud Keychain)
2026-10-05
capkz/bw-picker
A
Bitwarden auto-type for Windows: fill logins into any desktop app (games, launchers, Discord) with a hotkey. Unofficial; uses the official Bitwarden CLI.
2026-09-27
agentscope-ai-java/deno-lockfile-diff
B
Turn a deno.lock diff into prioritised supply-chain signals — new raw-URL imports, integrity changes, registry moves.
2026-09-03
livenson/umbrik
A
CDOC2 encrypted containers in Rust — the Estonian .cdoc2 format. CLI, library and Python bindings, with ID-card support via PKCS#11.
2026-09-24
crypt0p3g/dpapi-toolkit
B
Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Offline, CLI + web UI.
2026-09-07
scs32/tailterm
B
Browser SSH over Tailscale with encrypted credentials, tmux sessions, and tiled terminal groups
2026-11-05
marselnenaj/omarchy-yubikey
B
Touch-to-authenticate sudo, Polkit and screen unlock for Omarchy, with guided setup and optional GNOME Keyring unlock.
2026-10-29
R44VC0RP/query
B
Let coding agents ask you for secrets in a floating macOS prompt instead of in chat
2026-10-26
joelhooks/lockjaw
B
🔐 Egress credential injection for agents: agents hold placeholders, the cell fills real keys at the edge for approved hosts.
2026-10-16
Palladiymateria/sharecheck
B
Local CLI that checks your project for accidental secrets, sensitive files, and oversized assets before publishing to GitHub. No uploads. No runtime dependencies.
2026-10-21
Show HN: Death Plan Switch, a self-hosted dead man's switch for solo devs
B
Hi HN, I'm Peter Bishop and I've been working in graphics and web tech for over 25yrs. I've recently launched Death Plan Switch to solve a major problem in my succession plan. What if I go missing or die? The right people are told and my business can continue to operate for my clients. There's a backstory to this project, I was hospitalised in 2012 and lost my business back then and I couldn't get the data to my technical 2IC in time without frustrating my clients. Death Plan Switch solves this problem, it's free to download and use or study under the MIT license. I've been using it for the last few weeks. It was authored with the help of Claude Code after writing an extensive MD document and it passed 42 unit tests. I hope you get some use out of it, or it inspires your own succession plans. My clients are telling me this is a strong sales feature when they trust me with their hosting and technology accounts. Happy to answer any questions. Kind regards, Peter Bishop.
2026-09-10
sashyo/minidauth
B
Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.
2026-09-17
cyancity/easy-unlocker
B
Secrets management for AI agents: approve API keys and credentials on your phone with biometrics, delivered end-to-end encrypted into the target process. Plaintext never enters the chat, logs, or relay.
2026-08-25
MaxHu-xuan/chat-archive-guard
B
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
2026-10-17
gungnir-sanye/tee-attestation-extraction
C
Android TEE/KeyMint 技术研究：Keybox 与 RKP/DICE 原理、三台设备实践记录和验证方法 | Android TEE/KeyMint research notes on Keybox, RKP/DICE, and three device studies.
2026-09-25
Show HN: Air-gapped file encryption as self-decrypting HTML page
C
Air-gapped file encryption packed into a single, self-decrypting HTML page. Repo: https://github.com/ApelegHQ/ts-cms-ep-sfx I was inspired by self-extracting archives. I wanted to share files with basically no dependencies. The goal was: 1. Something that didn't require any installation (assuming a web browser) 2. Have a single file with no network that could self-decrypt 3. Be fully auditable The second point is done by having (sort of(*)) reproducible builds and embedded OpenPGP signatures. The first point is made by cleverly manipulating the HTML structure so that it can decrypt without breaking the PGP signature. It can even decrypt using bare openssl (which was a design goal too, though getting the exact structure right took some work and bug reports). The third point is accomplished by the first two, and by the source being freely available. (*) Depends on the OS at the moment.
2026-10-02
Hamidooh/witness-vault
B
Zero-install, air-gapped, self-decrypting HTML vaults using AES-256-GCM and native WebCrypto.
2026-10-22
vvalencian/XGB430vProDigiDecrypt
B
Script Python que inicia sesión en tu router XGB430vPro de Digi, se descarga la configuración, la descifra y te muestra las credenciales de administrador, PPPoE y SIP.
2026-09-16
Technicalflight/AiGuard
B
AiGuard —— 本地优先的 AI 流量安全网关：本机 MITM 代理只接管 AI 域名，请求侧脱敏、响应侧流式还原，并识别七类风险信号。原文不落盘、不上传。（注意如果你需要模型直接使用token或者其他密钥进行操作，请放入白名单或关闭该功能！！！！）
2026-09-12
Photon94/NotchOTP
B
Native macOS TOTP authenticator: your two-factor codes in a panel below the notch, one shortcut away. Developer ID signed and notarized.
2026-10-29
Forem0/ENGRAM
B
Find what remains. A local desktop app for inspecting photos, documents, secret candidates and traces in selected files and supported backups. Tauri + React, shared Rust engine.
2026-10-08
riomar0001/lanyard
B
A modern SSH and Git identity manager for developers. Manage SSH keys, Git accounts, hosts, and configurations — and switch between identities effortlessly.
2026-08-24
fivetaku/tikeytaka
B
Central API key vault for Claude Code — encrypted cloud-synced vault, zero sign-up, auto-wire keys into projects
2026-09-17
JSap0914/kakao-headless
B
Read. Approve. Send. A local KakaoTalk CLI with a managed Aside integration, guarded sends and encrypted credentials.
2026-10-08
3rab1Dev/SecretSieve
B
Intelligent, local-first secret detection CLI for finding exposed credentials using signatures, entropy, context, and deterministic confidence scoring.
2026-08-24
VITASID57/chatgpt-local-supervisor-bridge
B
A safe, allowlisted bridge from ChatGPT web to local project files through OpenAI Secure MCP Tunnel.
2026-09-18
bl4ckarch/go-responder
C
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
2026-10-26
joelhooks/alchemy-tailscale
C
Tailscale resources for Alchemy: policy file, auth keys, device tags, DNS
2026-10-03
idkrandombuilds/SINdle
C
A hidden, password protected library for your most secret Kindle books. KoReader Patch.
2026-10-02
ADScanPro/ad-audit-wordlist
C
The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws, order-preserving dedup via rling, paired with OneRuleToRuleThemStill for hashcat. MIT, rebuild-it-yourself recipe.
2026-09-05
dev3Masud/2fa-app
C
🔒 Secure, zero-knowledge self-hosted 2FA (TOTP/HOTP) authenticator vault with modern dark UI, QR scanner, and custom groups.
2026-11-01
Townlanurture/aegis-skin-terminal
C
Aegis Skin Terminal: local-first CS2 trading workspace with a fee-aware spread scanner, vault workspace and offline Steam Guard codes.
2026-08-24
IngenieroSeed/SafeGenerator
C
Software autocontenido en un único archivo HTML, sin dependencias ni conexión de red, que implementa el estándar BIP-39 de forma determinista y auditable.
2026-09-17
juliannacorreia/Crypto-Recovery
C
Python-based cryptocurrency wallet forensics suite supporting 40+ wallet types on Windows, Linux, and macOS. Features encrypted vault analysis, wallet detection, seed recovery, multi-chain address derivation, threaded processing, and TXT/CSV/JSON export. Designed for security research, compliance, incident response, and blockchain investigations.
2026-10-04
alphaparkinc/genpark-enterprise-merkle-audit-proof-anchor-skill
C
Cryptographic Enterprise Audit Trail Merkle Tree Anchor (inspired by Enterprise Work Agent & Regulatory Governance). Hashes agent execution logs into tamper-proof Merkle trees, computes cryptographic inclusion proofs, and verifies audit integrity.
2026-09-21
dextok/sub2api-state-guard
C
Sub2api State Guard：sub2api 插件，为 OpenAI OAuth 账号自建 x-codex-turn-state 算力票池，按模型铸票并在转发时注入，不依赖任何外部服务端
2026-10-27
SRN0129/Agenttrust
C
Enterprise Zero-Trust Security, Cascading Delegation, Human Approvals & Verifiable Audit Infrastructure for Autonomous AI Agents
2026-09-30
OwenxuSH/shanghaitech-kimi-gateway
D
Local Kimi-K3 gateway and automatic IDS passkey setup for Kimi Code
2026-10-16
YOURSJEYO/claude-switcher
D
Fail-Closed 账号环境管理器:11项环境指纹审计(Block-on-Fail)、手写STUN协议栈的WebRTC泄漏探针、Kill-Switch断网急停、多账号快照隔离、配置漂移自愈 —— 让真实IP在物理上无法泄漏
2026-08-27
yellowkeycve2026/YellowKey-BitLocker-CVE-2026-45585
D
YellowKey BitLocker recovery - bitlocker yellowkey, yellowkey bitlocker, CVE-2026-45585, yellowkey github, yellowkey vulnerability, yellowkey CVE, TPM, BitLocker recovery key backup, Windows 10/11, CLI GUI, portable audit tool. Download:🡇
2026-09-16
sam-v-hq99v4/deepseek-bypass-2026
D
Unlock DeepSeek V3 and R1 Pro APIs with an OpenAI-compatible wrapper and rotating shared keys. Access powerful DeepSeek models with a simple API setup, flexible integration, and streamlined access for development, testing, and AI-powered applications.
2026-10-22
0xgetz/rtrvr-bulk-9router
D
Bulk-create Retriever AI (rtrvr.ai) accounts, harvest Firebase tokens and session cookies, and serve 10 free managed models through an OpenAI-compatible pool wired into 9Router.
2026-10-01
xxx-holic/wishtoken-desktop
D
WishToken desktop companion for Codex: local accounts, explicit BPS/native channels, isolated App/CLI launch and visual comparisons.
2026-09-15
NeedleWarlockDefeat/cookie-session-validator
D
Multi-threaded web session cookie and proxy status checker designed for fast credential validation and automated logging.
2026-09-17
ishandutta2007/Awesome-Public-Key-Infrastructure-Platform
D
Top Public Key Infrastructure (PKI) Platform (Opensource) 🌟 Star if you like it! 🌟
2026-08-28
alberto4442/LatentVault
D
LatentVault enables real-time, distributed encryption of data at the storage layer, securing access through a centralized repository gateway.
2026-10-14
pverhoeven74/Crypto-Clipper
D
Crypto Clipper is a cross-platform clipboard monitoring and builder tool for BTC, ETH, SOL, TRX, LTC, and DOGE address detection. Features include regex matching, address validation, activity logs, custom rules, clipboard history, UI customization, and standalone client generation for Windows, Linux, and macOS with embedded settings.
2026-09-02
Figureiuchant56/Simple_Checker
D
Simple Checker - All-in-One Data Validation Tool for Steam, Epic Games, Netflix, and 100+ Services.
2026-09-02
MockingbirdFix/Simple-Checker
D
Simple Checker - All-in-One Data Validation Tool for Steam, Epic Games, Netflix, and 100+ Services. Topics
2026-11-07
MessengerWall/seedphrasegenerator
D
Seedphrasegenerator 2026 automated deployment pipeline for secure, efficient desktop software utility configuration.
2026-10-11
liliy886/google-gmail-account
D
谷歌邮箱_谷歌账号一手货源 | 个人/企业/API直登授权 | Gmail成品号免绑手机号·纯净IP·密码密保全可改 | 同步供应Outlook双令牌API、TikTok/YouTube/Vinted/Steam跨境养号、AI代充 | 8年老店包售后包稳定 | 一个也是批发价
2026-10-16
Yarnnovapergola/actual
D
1password-app-for-mac-os-and-windows-free-password-manager-desktop
2026-11-09
Dipanshu9997/seedphrase-audit
未评级
seedphrasegenerator: full-feature desktop installer for security research and testing
2026-11-09
GUFRAN7998/passfab-unlocker-desktop
未评级
passfab-unlocker: Standalone Offline Password Recovery Solution
2026-11-08
dreamers-laboratory/good-door
未评级
A simple, secure CLI tool designed to manage secrets (for humans and agents)
2026-11-06
MyZahradamiyas1816/Seed-Generator
未评级
Professional BIP-39 Seed & HD Wallet Toolkit with 12–24 word mnemonics, checksum validation, BIP-44/49/84 derivation, and multi-chain support (BTC, ETH, SOL, LTC, DOGE, ADA, DOT, AVAX, ATOM, XRP, TRX). Features offline CSPRNG, PBKDF2-HMAC-SHA512, AES-256-GCM encryption, wallet recovery, CSV/JSON export, and custom derivation paths.
2026-11-06
iJetLi/dsh-providers-hub
未评级
deepseek-harness plugin: sign in and manage accounts across multiple AI coding providers, with multi-account pools and silent credential refresh
2026-11-05
odudumkpong-hue/secure-seed-vault
未评级
seedphrasegenerator: a technical tool for generating and verifying seed phrases securely on desktop.
2026-11-04
cr-zhichen/password-manager-switch
未评级
无需 root，通过 Shizuku 查看并切换 Android 默认密码管理器、通行密钥提供者与自动填充服务。
2026-11-04
lemonadesaltbagel/veil
未评级
Local privacy proxy for AI coding agents. Keep PII and secrets out of LLMs with deterministic pseudonymization.
2026-11-03
Git-FED/MuseAi-Account-Backup
未评级
AI Agent Lockout Backup Kit A vendor-independent continuity kit for backing up, rotating, and recovering information used by AI agents—without storing secrets in the agent or in GitHub. Check out Muse, your personal AI agent. Code: 5F2V31 https://muse.ai/join
2026-10-31
ConvergeRobinDeem/SeedPhraseGenerator
未评级
Seedphrase Generator 2026: Full working installer with all features unlocked, ready for immediate desktop use.
2026-10-30
ray-amjad/claude-code-mods
未评级
Claude Code mods: panes, bands, prompt guards, secret handling and memory tools
2026-10-24
storytold/craft-ai-integrations
未评级
Interim AI layer for the Craft apps: connections, keys, providers, client, egui widgets (first draft)
2026-10-24
Show HN: Cryptex Vault – A password manager designed to outlive its creator
未评级
Hello everyone! About four years ago, a password manager I've used and depended on has been acquired and soon after, it was shut down. If anyone remembers MYKI, it was a password manager that stood out at the time. It didn't require an email address and a password for registration and it synchronized credentials peer-to-peer. It was quite handy so a couple of my friends and I got hooked, and were using it up until the last day it was online. The thing was, I didn't want to change password managers to other options available at the time, none felt right - I wanted to stay.. So I did what any sensible engineer would do 4 years ago and I wrote my own. I moved all my credentials there as soon as I had a first version ready. It was ugly (God knows I had UI/UX skills to learn), but it worked. Soon after, the same friends that were using MYKI switched over to using Cryptex Vault. I get why, we had the same P2P synchronization across devices, it was simple and didn't try to be the most-feature complete application out there - it did the job. That was an exciting moment. So exciting, in fact, that I've posted to HN to tell people about it. At the time, I had a weird thing for decentralization so I called it a "Fully Decentralized Password Manager". Three years go by, I keep maintaining the project, with no real intention of proper marketing or polishing. At one point I checked the usage and figured out that a handful of people (and their families) were still using Cryptex Vault as their password manager. Three months ago, I left my comfy job as lead software engineer at a local company to dedicate time to a company I called Cryptex Industries. Polished Cryptex Vault, cleaned it up, made it open source, started providing Docker images for self-hosting and included some of the features I've only used internally (ssh-agents). That way Cryptex Industries need not remain operational for users to have a path to continued use! To make the project commercially viable, I started offering managed services through the Online Services plan. By using Online Services you remove the operational burden of self-hosting and infrastructure maintenance from yourself while still getting the same benefits: Managed backup storage, synchronization between devices, sharing, ssh-agents, device management. It is convenience, not access to core features. The core application is free and you can use it with no subscriptions of any kind, whatsoever. It's P2P synchronized, with industry-standard crypto choices including post-quantum primitives for synchronization - https://www.cryptex-vault.com/docs/cryptography It has importers for popular password managers, along with autofill for chromium browsers (firefox is a todo, yell and I'll get on it). As for the platforms, there is a web app, an android application and an ssh-agent for linux (will put it up on AUR when they open up registrations again). Feel free to try it out (there is a 14-day trial for managed services!), self-host it or break it. I would appreciate your thoughts on this and I wish you a nice friday!
2026-10-24
Show HN: LeakLock – Gitleaks for your live site(finds keys with no known format)
未评级
GitHub sgroy10/Leaklock ★0 · Gitleaks for your live site. Find the secret API keys your website ships to the browser, even ones with no known format. Free, MIT.
2026-10-24
Show HN: CodeCatch gets 2FA codes from texts and email for you and your agents
未评级
GitHub ugzv/CodeCatch ★29 · Mac menu bar app that catches 2FA verification codes and sign-in links from Messages and mail and puts them on your clipboard.
2026-10-22
SivaSaiKrishnaSuryadevara/docker-mcp-guardian
未评级
Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction
2026-10-22
tony-cdev/seed-phrase-generator
未评级
WalletGen - Seed Phrase generator / checker for Bitcoin (BTC) and ETH (Ethereum) wallets. Find or recovery your wallet via brute force and brain wallet generation
2026-10-21
huzhengcai471-crypto/dsh-startup-secret
未评级
DeepSeek Harness 启动动画插件（二次创作版）：暗色赛博风格开机动画，徽章标识 + 赛博电子风人物立绘 + 访问密码功能
2026-10-21
nniiovoo/encrypted-note
未评级
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. macOS and Windows.
2026-10-20
Show HN: Hiding messages as a generative art; open sourcing my code from 2020
未评级
I've always been fascinated by secret messages, and for years I scribbled ideas for a graphical way of hiding messages that would be decipherable by humans without computers, while still being non-trivial and novel. This is what I came up with in 2020 (pre-LLM era ^^). The shapes are inspired by fingerprints. The name comes from "steganography", the art of hiding messages in plain sight.
2026-10-19
leepokai/jev-guard
未评级
Auto mode for every coding agent, built on Jev: risk-scores every tool call with session context (deny / ask / allow), flags prompt injection in results, checks skills and plugins. Claude Code, Codex, Copilot, Gemini, Cursor, pi, OpenCode, ACP.
2026-10-19
ExpertDetach/pwfauth-resp-python-client
未评级
Console tour of the official pwfauth Python package: license keys, the heartbeat kill switch, moving a license to a new PC, trials and user accounts.
2026-10-17
omaekumiko2-create/OpenKeylet
未评级
OpenKeylet — Local password and credential manager for AI agents via MCP. Use passwords, API keys, SSH, and TOTP while keeping hidden plaintext out of model context by default.
2026-10-16
AhmadHassan-BTed/ShopifyAutoAuth
未评级
Enterprise-grade Shopify Admin API authentication adapter — OAuth 2.0 Client Credentials Grant with automatic token refresh.
2026-10-16
Akimiya-z/codex-guard
未评级
Quality gate for AI/Codex-generated pull requests: blocks TODO leftovers, leaked secrets, sloppy commits and red CI before they reach main.
2026-10-16
BennyThink/NFCX
未评级
NFC eXtended: A focused, cross-platform desktop workbench for authorized NFC card work.
2026-10-16
ChiefGyk3D/Clouds-Against-Humanity
未评级
OpenTofu + DigitalOcean + Spacelift + Doppler + Twingate: a zero-trust cloud lab, built in costed stages.
2026-10-16
Continuum-AI-Corp/scuttle
未评级
Tiny post-quantum encryption for sensitive data. Write-only by design. ML-KEM-768 + X25519 + AES-256-GCM. Please break it.
2026-10-16
DevDock-AI/claude-unlimited
未评级
Rotate Claude and GPT subscriptions and API keys seamlessly inside the Claude Code CLI — switch on usage limits without interrupting your session, all from a local dashboard. 100% local.
2026-10-16
LeoAlecksey/opsdeck
未评级
DevOps cockpit in one window: terminal with local AI, Kubernetes, SSH, databases, IDE with git, alerts, notes and KeePass. Free, open source, Linux/Windows/macOS. Рабочее место DevOps-инженера в одном окне.
2026-10-16
MORTEN-BUUR/nordef-matrix-open-control
未评级
NORDEF Matrix Open Control: model-independent AI safety belt with 0/1/2 decisions, Ed25519 root gate, replay protection, evidence chain, and incident-pattern eval bank
2026-10-16
ThinkWatchProject/ThinkWatch-Lite
未评级
Local gateway for Claude Code, Codex and other AI clients on macOS, Windows and Linux: switch upstreams without touching clients, keep API keys from relays, cut off malicious tool calls, trace every request.
2026-10-16
dopbase/dopbase
未评级
DevOps secrets base: lightweight, self-hosted secrets manager in a single file
2026-10-16
emilybarru/CryptoCoreLegend
未评级
CryptoCoreLegend: A Real-Time Distributed Key Management Framework for Secure Blockchain Integration and Decentralized Data Protection.
2026-10-16
glaz-boga-poisk-bot/glaz-boga
未评级
Глаз Бога: поиск по телефону, email, нику и Telegram ID. Открытые, архивные и ранее утёкшие записи; совпадения зависят от доступных данных.
2026-10-16
jasonzhang06-source/sharelint
未评级
Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.
2026-10-16
notinferred/keypaste
未评级
A KeePass-compatible password and secrets manager for people who work with AI agents.
2026-10-16
omaekumiko2-create/kru
未评级
Local-first MCP password and credential manager for AI agents. Use passwords, API keys, SSH identities, and TOTP without exposing hidden plaintext to the model.
2026-10-16
solongate/agent-security
未评级
Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
2026-10-16
strands-agents/box
未评级
Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon, with Linux support planned.
2026-10-16
theycallmehassan1/transition-state-zero-trust-toolkit
未评级
This consolidated document combines a gap analysis with a practical toolkit. It is designed to complement NIST SP 1800-35 by explaining a narrow transition-state implementation need and then providing vendor neutral worksheets, checklists, test records, assurance reviews, and pilot artifacts that organizations can use while legacy
2026-10-16
tsymbaluyk/maskgate
未评级
Mask Gate — PII masking shield: detect and mask passports, INN, SNILS, cards and other sensitive data before sending to ChatGPT, Claude, Gemini. block / redact / flag, reversible vault, self-hosted, 152-FZ.
2026-10-16
Show HN: Luksmith – Mount LUKS Ext4 Drives Natively in Finder on Apple Silicon
未评级
I’ve recently moved over to macOS this summer and previously I heavily used Linux (still do as I have a homeserver running Arch and Omarchy Thinkpad for fun). I have a few LUKS Encrypted hard drives with photos I wanted on my Mac and then quickly realized that there’s no native way to open the drive. So I spent some time to make luksmith, essentially decrypting the luks drive, mounting the underlying EXT4 drive and using Apple’s Userland FSKit Library to make it appear in the finder window to make it as close to home on a Mac as I can (with journaling caveats because I can’t control which order writes happen in). It’s completely free to read and copy files from the drive if you try it out ‘brew install --cask betizzel/luksmith/luksmac’. And $9.99 one time purchase to unlock writing to the drive. No account needed, no telemetry shared back to me, no network connections made. Requires Apple Silicon + macOS 26. Full format support and limitations here: [ https://luksmith.app/#formats]( https://luksmith.app/#formats) available on the appstore: https://apps.apple.com/us/app/luksmith/id6806869711?mt=12 and the website: https://luksmith.app/#formats
2026-10-14
Show HN: Tern – Native macOS SSH Client in Rust/GPUI (76 MB vs. Tabby's 580 MB)
未评级
On my day to day work i mostly use termius and tabby as multi project ssh tool with vault, somehow most of the features i use are just vault and password manager, and they are bulky, takes about 500mb ram for such simple program, and termius wants paid plan just to sync the vault. There are free tools but their ux is not at that level. So i built my own simple ssh client with a little bit of my taste added, it has vault, password manager, repo sync, background gallery etc. I have been working with rust on my hobby projects about 2-3 years and really got headaches from it, because its really hard to maintain features on rust project while fighting the borrow checker. Now with claude and some llm tools its very easy to build things, even some of the code written by agents is still slop but its fine to live with some slop. The main parts are modified from well written software. Instead of cheap copying or writing from scratch, i copied from real world solutions with apache or mit license, well maintained and well written software that has almost no ai slop. With some amateur level rust knowledge and some inspiration projects its really easy to build such low memory software, it only takes 85-125mb with wallpaper, mostly 80mb ram. Here's the repo https://github.com/your-moon/tern any feedback and feature requests are welcome, i gladly answer
2026-10-14
Show HN: Hatoba, an open-source SSH client with an AI assistant and E2EE sync
未评级
I've used SSH tools for years and didn't really plan on building yet another SSH client, but I ended up building one the way I wanted. Hatoba is a desktop SSH client for Windows, Linux and macOS. It's written in Rust with Tauri 2 and MIT licensed. Each terminal has an AI assistant panel next to it. You describe the problem, and it reads the terminal screen, runs commands, types into the shell, and reads, edits and searches files on the host to find the cause and fix it. You can approve every command and edit it before it runs, let a model you pick approve the safe ones, or turn approval off. Files it changes show a diff you can undo. It works with any OpenAI-compatible or Anthropic API, local models included, and supports skills and MCP servers. Sync doesn't go through a server of mine. Hatoba deploys a Worker and a D1 database to your own Cloudflare account and syncs hosts, keys and AI conversations through them. The free plan usually covers personal use. Everything is encrypted on the device before it leaves. Keys are derived from your master password with Argon2id, every item is encrypted with AES-256-GCM, and the Worker only stores ciphertext plus the hashes it needs to sign you in. Someone who gets hold of the whole Cloudflare account still only gets ciphertext. Sync is optional, and everything works offline without it. The usual SSH client features are there too: groups, tags and fuzzy search, ~/.ssh/config import, ProxyJump and SOCKS5/HTTP proxies, an SFTP panel, local port forwarding, and a key vault that imports OpenSSH, PEM and PuTTY keys. There's also a dashboard showing CPU, memory, disk and network for every saved host, read over plain SSH with nothing installed on the servers. SSH is russh, the terminal is xterm.js with the WebGL renderer, and the UI is React. I develop on Windows, so it's Windows first, with a custom title bar that supports Snap Layouts and Mica, and working CJK input methods. The Linux packages and the macOS build get far less testing on real machines. The macOS build is Apple Silicon only and isn't notarized, so macOS blocks it on first launch until you allow it in Privacy & Security. Bug reports from Linux and Mac users would help the most. Website: https://hatoba.fog.moe Downloads: https://hatoba.fog.moe/download/
2026-10-14
Show HN: Tern – Native macOS SSH Client in Rust/GPUI (76 MB vs. Tabby's 580 MB)
未评级
On my day to day work i mostly use termius and tabby as multi project ssh tool with vault, somehow most of the features i use are just vault and password manager, and they are bulky, takes about 500mb ram for such simple program, and termius wants paid plan just to sync the vault. There are free tools but their ux is not at that level. So i built my own simple ssh client with a little bit of my taste added, it has vault, password manager, repo sync, background gallery etc. I have been working with rust on my hobby projects about 2-3 years and really got headaches from it, because its really hard to maintain features on rust project while fighting the borrow checker. Now with claude and some llm tools its very easy to build things, even some of the code written by agents is still slop but its fine to live with some slop. The main parts are modified from well written software. Instead of cheap copying or writing from scratch, i copied from real world solutions with apache or mit license, well maintained and well written software that has almost no ai slop. With some amateur level rust knowledge and some inspiration projects its really easy to build such low memory software, it only takes 85-125mb with wallpaper, mostly 80mb ram. Here's the repo https://github.com/your-moon/tern any feedback and feature requests are welcome, i gladly answer
2026-10-13
Show HN: Personal Agent Proxy (Open Source)
未评级
Every (personal) agent (like Muse, Instinct, Grokbot, Poke) asks you to connect your email, calendar, and tools again. Permissions are intransparent and every provider ends up building the same integrations. We think there needs to be an independent tool that holds all connections to third party companies. That way you can keep auth separate, audit what an agent does, set fine-grained permissions and easily switch between the agent apps. I built this over the last few days with my friend Konsti. It's open source and we’ve put a lot of care into the self-hosting experience. Now my Instinct has the same tools as Claude Code and Codex on my laptop. What are your thoughts about this and how are you handling this today?
2026-10-10
tashfeenahmed/freellmapi
未评级
7.4 billion tokens per month. 34 free LLM providers. 635 free model endpoints. All behind one /v1 endpoint, plus any custom OpenAI-compatible endpoint. Smart routing, automatic failover, encrypted keys. Personal experimentation only.
2026-10-07
Sightarbreed/1password-download
未评级
1Password — Security SaaS listing. Visit link via SOFTGIT. Third-party; rights belong to original authors.
2026-10-05
Show HN: An eBPF kernel guard for vTPM access
未评级
A kernel guard I prototyped after eBPF and vTPM work for a customer, where we use the TPM to protect the private keys for mTLS. Any process running as root can open the TPM devices, and so can any process in the `tss` group, through `/dev/tpmrm0`. That means they can use those keys too. This is a prototype and some research into protecting this path.
2026-10-03
Show HN: Syn – Approve remote sudo requests from your Mac
未评级
I built Syn to review and approve individual sudo requests from a remote machine using Touch ID on my Mac. The problem came up about five minutes after I set up my Raspberry Pi with Ubuntu Desktop and Codex. I wanted an always-on personal agent with Browser Use, Computer Use, and a residential IP, accessible from both my phone and laptop (keep in mind, this was before Muse and Dots dropped). But a few prompts in, in order to run a command that needed `sudo`, the agent asked me to enter an administrator password in a terminal that–to me as a client on my Macbook–seemingly didn't exist. I then realized: "this dude has some password prompt open on its TTY, and I simply cannot see it." Unrestricted passwordless sudo would have removed that interruption, but I wanted to keep approving administrator actions myself, so setting up my Pi pivoted into building a Mac app. And so Syn was born: Syn hooks into sudo after its policy check. It pauses the invocation and shows the machine, account, executable, and arguments on the paired Mac, where I can approve it with fresh Touch ID or Mac-password authentication. Each approval is cryptographically signed and bound to that specific invocation. The unprivileged network service only relays signed requests and decisions; sudo executes its original command. The devices communicate directly over mutually authenticated TLS, without the need for a cloud relay. Interactive terminal use also has a password fallback, and Syn works with any eligible commands regardless of which agent—or person—started them. Current support is macOS 15+ on Apple silicon and Ubuntu 26.04 ARM64 with classic sudo.ws 1.9.x. I have mine set up between my Raspberry Pi and my Macbook with NordVPN Meshnet in the mix to ensure I can connect when outside my LAN, but it should work the same with any compatible VPS or using another virtual LAN (like Tailscale). If this fits your setup, I’d love folks to try it and share feedback! It's an open-source project, so PRs are super super welcome.
2026-10-01
Show HN: Ciao – Control coding agents from your phone
未评级
Hi HN, I built Ciao to solve problems I was experiencing: 1. Connecting to a new host should be as seamless as possible. I SSH a lot nowadays, and I find the key sharing across devices cumbersome. 2. I get annoyed by setting up insert-your-favorite VPN on new machines. They're all great. I don't want to think about them. 3. There's a lot of harnesses: Claude Code and Codex now have decent mobile push notifications but what about Pi or xyz-shiny-new harness? The harness is another tool that should be abstracted out. 4. I want a single application that has the big picture of all of my agents. Tmux and Herdr are great but they don't have an overview of all my connected machines' agents. --- With Ciao you curl|sh the daemon --> run ciao pair --> point your phone's camera at the QR code --> and you're connected. It uses iroh for accountless and E2EE connection. There's an optional relay server for APNS which too is E2EE. One of my favorite aspects of agentic-engineering is being able to just have a lot of fun with programming. Among many features, I built a visually pleasing toggle between terminal-mode and native-chat-mode. If you install Ciao, come back here and tell me what you think. --- Full transparency: this is a repost from yesterday, it was a massive day in AI.
2026-09-28
Alpha-Park/genpark-document-redaction-pii-scrubber-skill
未评级
High-speed document PII redaction and credential sanitizer featuring Luhn credit-card verification, reversible salt hashing, and audit logs.
2026-09-28
alphaparkinc/genpark-document-redaction-pii-scrubber-skill
未评级
High-speed document PII redaction and credential sanitizer featuring Luhn credit-card verification, reversible salt hashing, and audit logs.
2026-09-27
Alpha-Park/genpark-agent-sandboxed-file-diff-safety-auditor-skill
未评级
Pre-commit diff safety scanner preventing destructive shell commands, API token leaks, and disk corruptions
2026-09-27
Alpha-Park/genpark-agent-tool-permission-rbac-validator-skill
未评级
Role-based access control and tool privilege attenuator preventing unauthorized tool invocations
2026-09-27
Alpha-Park/genpark-autonomous-honeypot-canary-sentinel-skill
未评级
Dynamic honeypot and cryptographic canary token sentinel detecting prompt extraction and triggering session freezes
2026-09-27
Alpha-Park/genpark-covert-data-exfiltration-firewall-skill
未评级
Egress data exfiltration firewall detecting obfuscated credentials, private keys, and API tokens in payloads
2026-09-27
alphaparkinc/genpark-agent-tool-permission-rbac-validator-skill
未评级
Role-based access control and tool privilege attenuator preventing unauthorized tool invocations
2026-09-27
alphaparkinc/genpark-covert-data-exfiltration-firewall-skill
未评级
Egress data exfiltration firewall detecting obfuscated credentials, private keys, and API tokens in payloads
2026-09-26
Show HN: A single-use authorization boundary in Rust
未评级
I built a small Rust experiment for putting an authorization boundary in front of a protected action. An authorization is tied to a specific action, resource, and payload. Once it's used successfully, trying to use the same authorization again is denied. The repo includes the implementation, tests, and reproduction steps. https://github.com/trencinodin-stack/arcstone-mcp-sidecar I'm interested in edge cases or failure modes I've missed.
2026-09-26
Show HN: Tlx – E2E chat over SSH under 500 lines of code
未评级
This is a reference implementation of encrypted chats for small trusted groups. It runs SSH server in a container that acts as a mailbox for opaque encrypted blobs (145 lines of code). SSH keys serve as an identity. Then a local demon syncs and decrypts these blobs into SQLite database (321 lines of code). I wanted to make crypto as simple as possible and have only widely used and well audited components. Relay server and sync demon are implemented in standard Python without any extra dependencies. I've chosen Python as it ships with SQLite client in standard library. Could have used go/rust, but wanted to keep reference implementation as simple as possible with minimal dependencies.
2026-09-26
Show HN: Threshold Cryptography for AI Agents Using Payments and Digital Assets
未评级
We introduce the concept of a "cryptographic identity", which consists of a private key, a manifest attached to it that defines what a specific action is allowed or not allowed to do, and additional controls. The principle is simple: when an AI wants to perform an action, it has to request a signature for that action, and the signature is issued only after the checks pass. I think this approach is flexible enough for most use cases, while also improving accountability and making it possible to build architecture around a zero-trust model. The system lets you define your own action schemas, or plug in modules for agentic payments, such as Google AP2 and Mastercard Verifiable Intent, or a digital assets module that lets an agent work with crypto wallets. Basically, modules for different types of actions. Compared to other solutions, there is a fundamental difference between (as an example) "we allow the agent to make payments" and "we allow the agent to make THIS specific payment." With threshold cryptography, we distribute the risk so that compromising a single node does not let an attacker steal the key, replace or remove policies, or otherwise concentrate control in one place. Feedback is welcome :)
2026-09-23
Show HN: Every Credit Card
未评级
Inspired by Every UUID, I thought: this would work for other datasets. And what would make the PCI auditors lose their minds more than just publishing every credit card number? Voilà! Every Credit Card! And no wimping out with masks or hidden PII either...
2026-09-22
elevenlabs-api-key/elevenlabs-api-key.github.io
未评级
An ElevenLabs API key sits behind a normal sign-up, not the marketing site. What elevenlabs.io publishes, what it leaves to the pricing page, and the quota trap.
2026-09-22
virlo-dev/brave-search-api
未评级
Unofficial guide to the Brave Search API: plans, $5 free monthly credits, 50 qps capacity, key handling, gotchas.
2026-09-22
x-api-dev/awesome-brave-search-api
未评级
Curated links for the Brave Search API: dashboard, docs, plans, guides, MCP server, key security, alternatives.
2026-09-22
Show HN: Agent Chaperone – Screen AI agent tool calls and results with Jev
未评级
Hi everyone. TypeSafe released Jev last week, and it pushed me to build agent-chaperone. It is a screening layer for AI agent tool calls and tool results. It screens risky, off-task, or secret-leaking actions before they run, and prompt injections or other suspicious instructions before the agent reads them. Repo: https://github.com/agent-chaperone/agent-chaperone Website: https://agentchaperone.dev/
2026-09-21
Stoneoereach/steam-cookie-validator
未评级
Validate Steam session cookies in bulk — check login status, detect expired sessions, and export clean cookie lists.
2026-09-20
Show HN: Seal – Letters and passwords that open for your family after you die
未评级
I'm a CS undergrad who has developed an interest in hardware keys ever since I used them for a school project a few years ago. I made a little chat app that only allows users to chat if they registered a key, nothing else. The backstory of how I came to work on Seal (this project): was that I was generating ideas with Claude to come up with an idea that only hardware keys could make into software. I was thinking about physical house keys and what you could do with those, but in software. I was already making iOS apps with Claude, and I came up with this idea and it sounded good. I had already worked on a few projects involving hardware keys and I already loved them. Today I submitted my latest app, Seal, for review in the app store. Seal is an iOS app for iPhone and iPad that lets you write an Envelope (an encrypted bundle of passwords, photos, voice memos, etc...) for all of your loved ones when you're gone. You can register hardware keys and assign identities for each person. Then you can create Envelopes and assign them to the key that you want to distribute. They plug in the key to their phone and are ready to receive an Envelope from you. If you don't log into the app for months, one of your designated key holders can start the process of opening the Sealed Envelope. You, as the writer of the letters, get weeks of warnings to check in at least once before the letters open. After 90 days of countdown, 21 days of warnings, and 14 days of grace, the envelope opens for each person they met IRL and exchange keys with. No one else can read the envelope or see the photos (even the key holders, Apple, or me) unless that envelope was designated for that person. What's different from a password manager like 1Password: emergency access there hands one person your whole vault through the company's server, so it needs that company to still exist and be honest on the day it matters. Seal gives each person their own envelope nobody else can open, and there's no company in the middle. There's also no server at all besides a free Cloudflare static site. The encrypted bundles of passwords and photos are in Cloud Kit. Sign-in/identity is a passkey Face ID/Touch ID or a Hardware Key. It's all Crypto Kit, so there's no dependencies required. Currently, it's just me and Claude working on this. It hasn't been independently audited by anyone, and it's iPhone only for now. Please do not put a live seed phrase in it yet. If anyone has advice for me as the lead developer for this project, I'm all ears! You can help contribute on the github source code repository page if you'd like. My mom likes this app especially because she's into crypto and she needed a way to pass down or give away the seed phrases for her wallets to all 3 kids without any question about who gets what and when. In the end, there's no confusion or hurt feelings after the fact with just crypto. Thank you for reading and let me know if you have any questions or concerns for me or the project! Source: https://github.com/jasonepage/Seal Site with limits and objections pages: https://sealmessenger.com Free on TestFlight while the App Store version is in review: https://testflight.apple.com/join/cYp9JRCG
2026-09-19
Show HN: "Seal" letters and passwords that open for your family after you die
未评级
GitHub jasonepage/Seal ★1 · Hi, I'm a CS undergrad who has had an interest in hardware keys ever since I used them for a school project a few years ago. Today I submitted my latest app, Seal,for review in the app store. Seal is an iOS app for iPhone and iPad that lets you write an Envelope (an encrypted bundle of passwords, photos, voice memos, etc...) for all of your loved ones when you're gone. You can register hardware keys and assign identities for each person. Then you can create Envelopes and assign them to the key that you want to distibute. They plug in the key to their phone and are ready to receive an Envelope from you. If you don't log into the app for months, one of your designated key holders can start the process of opening the Sealed Envelope. You, as the writer of the letters, get weeks of warnings to check in at least once before the letters open. After 90 days of countdown, 21 days of warnings, and 14 days of grace,the envelope opens for each person they met IRL and exchange keys with. No one else can read the envelope or see the photos (even the key holders, Apple, or me) unless that envelope was designated for that person. There's also no server at all besides a free Cloudflare static site. The encrypted bundles of passwords and photos are in Cloud Kit. Sign-in/identity is a passkey Face ID/Touch ID or a Hardware Key. It's all Crypto Kit, so there's no dependencies required. Currently, it's just me and Claude working on this. It hasn't been independently audited by anyone, and it's iPhone only for now. Please do not put a live seed phrase in it yet. Source: https://github.com/jasonepage/Seal Site with limits and objections pages: https://sealmessenger.com Free on TestFlight while the App Store version is in review: https://testflight.apple.com/join/cYp9JRCG
2026-09-18
SavageBullCrucible/steam-cookie-validator
未评级
Validate Steam session cookies in bulk — check login status, detect expired sessions, and export clean cookie lists.
2026-09-18
Scoutnefreeze/web-stealth-farm
未评级
Run stealth browser profiles at scale — anti-detect fingerprints, proxy binding, and automated session farming.
2026-09-16
Show HN: AirmailAI, a BYOK LLM chat app with a browser extension backend
未评级
Hi everybody! I recently launched AirmailAI: a fast, secure, and private bring-your-own-keys LLM chat app that uses a browser extension as the backend. FAQ and design/security info is available on the website. Happy to answer any questions!
2026-09-15
Show HN: Authorize MCP tool calls without giving agents the credentials
未评级
Hey HN, Adam here. We built a small MCP example around a single problem: How do you let an agent use a tool that needs credentials without giving the credentials to the agent? The demo has two tools. One is open. One is protected. When the agent calls the protected tool, Keydris checks the policy first: ALLOW → run the tool REJECT → stop The credential stays on the server. The agent never sees it. We do the check through a small middleware on the MCP server called the KIT Reader. Repo: https://github.com/keydrisLabs/mcp-auth-keydris-template We're early. If you're building with MCP, Claude Code or Codex, I'd love to know how you're handling this today and where you think this approach breaks. We support other elements like integrations etc but would love your feedback
2026-09-14
Show HN: I Built a CLI for Proton Mail, Drive, Calendar, Pass and Contacts
未评级
I made a command line tool for Proton. It covers Mail, Drive, Calendar, Pass and Contacts. It is one static binary for Linux, macOS and Windows. Proton doesn't have a CLI for all their web interfaces. There is one for Drive and one for Pass, but the other ones are not really there. There's no Mail CLI, Contacts or other CLIs. I wanted to have everything in one. It does logins the way the Proton apps do, with SRP. It decrypts and encrypts on your machine with Proton's own Go libraries, go-srp and gopenpgp. Your password never leaves the machine. It talks to the same API as the Proton web apps. There is no bridge and no daemon. It runs one command and exits. Some things it can do: proton mail messages list --unread proton mail messages get "Invoice #2291" proton drive items upload ./report.pdf /Documents proton calendar events list proton pass items totp github.com Every command has the same shape: proton <app> <collection> <verb>. Every command can print JSON. Every command that changes something takes --dry-run. This CLI does things the web interfaces do, in those five apps. But some things need a browser and are not here: importing from Gmail, adding a Zoom link, registering a security key and so on. VPN, Wallet, Docs, Meet, Lumo and Authenticator are not covered. Most of the code was written with LLMs as you can see. But I have an extensive test suite: 397 live tests against three real Proton accounts and a record of the 243 API endpoints they reach. Install with curl, Homebrew, winget, APT, AUR, Nix, npm or take a binary from the releases page. Feedback is more than welcome :)
2026-09-11
Show HN: BlindLock – Passwords hidden in a photo, sealed to your TPM/SE
未评级
Hi everyone, I'm David, the solo developer and owner of BlindLock. This is my second post here. BlindLock is more than a year of work. Not a weekend hobby project I threw together. I've put a hell of a lot of time, heart, and nerves into it. Why steganography? Picture a burglar. He looks for valuables, the obvious ones: gold, cash, jewelry, the safe in the basement. The picture of your kid on the fridge, the holiday photo on the wall, are irrelevant to him. That's exactly the principle BlindLock is built on. Hackers go after cookies, passwords in the browser, container files that can be decrypted with a password on any computer, crypto seeds, and other sensitive data. Anyone who can log into your Google account or your ChatGPT knows more about you than they could learn in a personal conversation with you. All of that can be grabbed with RATs and other malware, passwords included. BlindLock hides exactly these sensitive logins and passwords inside a picture, because a photo has almost no value to an attacker. And he'd first have to identify the picture as his target at all. On top of that, BlindLock seals this picture to the security chip of your computer. That means: even if an attacker copies the picture, together with the password, he cannot get at your data. The same chip sealing applies to the container vault files. And for these larger files BlindLock has a built-in file explorer, so you can open and edit files without mounting them into the OS. Wherever the respective OS allows it, I've written it to leave no traces behind. Why isn't BlindLock open source? That was the most frequent question. Take Bitwarden as an example. Bitwarden sells a service: servers, sync, accounts. The code can be open because the value isn't in the code. I sell the program itself. There's no service behind it, no cloud, nothing on my side that the customer would need. The entire value is in the program itself. That's why Bitwarden can give the code away and make it public for everyone, and I can't. What's open on my side is what has to be open: the cryptography libraries are freely available and partly formally verified (HACL, level 5, the highest). Anyone can audit them, down to the smallest detail. The network: BlindLock is offline at its core The main software never has an internet connection. Nothing goes out. That's not a setting, it's the build, the architecture: BlindLock is built so it can't reach the internet at all. There is no HTTP client in the program. There is no code, no module, no function that could open a connection to the outside. Everything that needs the server runs in a separate small program, the Net-Helper. It ships in the same package and installs with BlindLock, but runs as its own process with its own binary. BlindLock starts it, asks it a question, and gets an answer. No port, no socket, just the child process's standard input and output. The helper never sees a vault or a password. It has exactly two jobs: it checks the license, and it checks whether the latest BlindLock version is installed. If there's a new version, it downloads the update package and hands it over. In short: when you open BlindLock, it pings the server through the helper. That's it. There is no other internet connection. You can also use BlindLock offline for 7 days at any time. Tech stack, licenses, and WalletLink in my first comment below. Happy to answer everything here personally. Anyone can try BlindLock free for 7 days. No email, no payment details. David
2026-09-11
Show HN: Dbmask – Discover, mask, and verify sensitive data in SQL databases
未评级
Hi HN I developed *dbmask*, an open-source Python tool designed to discover sensitive columns in SQL databases, masking them with deterministic fake values, and validate the masking results. The motivation behind this tool stems from a common issue I encountered when handling test data: existing masking tools often assume the user already knows exactly which columns contain sensitive information. Furthermore, the successful completion of a masking task does not guarantee that all sensitive values have actually been replaced. dbmask aims to integrate these steps into a unified workflow rather than treating them as three separate tasks. During the detection phase, the tool makes determinations by combining column names, sampled values, database type/context, historical decisions, and optionally LLMs. While LLM functionality is disabled by default, it supports local execution via Ollama or other services compatible with the OpenAI API. If the tool cannot determine a column's nature with confidence, it marks it as `UNKNOWN` rather than simply classifying uncertain cases as "non-sensitive." I also wanted to incorporate human decision-making into the system. Detection results can be exported for manual review, and confirmed decisions can be saved in CSV, XLSX, or Markdown formats, or stored in a SQL history decision table. The system logs information about both the analyst and the reviewer and re-evaluates past decisions if column types change or review results expire. The masking process employs deterministic mapping, ensuring that identical original values consistently map to the same synthetic values across different tables. Once masking is complete, the `dbmask validate --strict` command compares the masked copy with the original data, checking row counts and table structures, and verifying sensitive values row-by-row using primary keys wherever possible. The project is currently in its early stages (version 0.1.x). The current CI (Continuous Integration) pipeline covers SQLite testing; integration tests for PostgreSQL and MySQL, as well as public detection benchmarks, are included in the future development roadmap. I would particularly appreciate feedback on the detection rules, the manual review/history tracking workflows, and the verification methods. Please let me know if you encounter any usability issues or potential security risks while testing on the temporary database. Install: pip install dbmask
2026-09-10
alphaparkinc/genpark-diffie-hellman-ratchet-forward-secrecy-skill
未评级
Autonomous Agent Double Ratchet Key Derivation & Forward-Secret End-to-End Secure Channel Engine
2026-09-10
Show HN: Locksmith: Store Maven Secrets in the macOS Keychain (Or a Unix Socket)
未评级
Hello HN, In the age of LLMs sucking in random secrets, sandbox escapes, and RCE orbital bombardment, I thought it'd be a good idea to create a Maven Extension that defers to the MacOS keychain for resolving secrets. In general, it's a good idea to not have any secrets (passwords, tokens, etc) stored in plaintext files. Also, this allows your machines to be FIPS-140 complaint, if thats a thing for your job. Locksmith is a Maven Core Extension that defers to the MacOS Keychain. The entry format in settings.xml looks like: `{[type=locksmith]nexus.superbiz.example.com/username}` This was a fun project and I used the Project Panama FFM with jextract for the first time. The FFM is a great iteration on JNI (which still has it's place) and was pretty much brainless to use. Setup is quick and easy and I tried to make the readme as friendly as possible. As an aside, I've also architected the core Library indecently from the Maven bits, so if you do need to read from the MacOS keychain in a project, you could pull the core Library in without dragging in Maven. Being 2026, of course Claude was used to assist in the creation of the project, however Locksmith is not vibecoded top-to-bottom. I personally loathe AI slop. I use LLMs as a tool, not a crutch. Enjoy!
2026-09-08
Show HN: Keyclasp – Let agents use tokens without putting them in prompts
未评级
Hi HN, I kept running into the same problem: either I’d have the agent give me the command, run it myself with the credentials, and copy-paste the output back, or I’d let the agent run it and keep finding secrets in its output. I looked into alternatives and asked friends, but the only workable approach I found for my workflow was writing custom wrappers around CLIs to handle authentication. I got tired of the back-and-forth, rotating leaked tokens, and maintaining wrappers, so I built Keyclasp. I've been using it for two months now and I don't see how could do without. Keyclasp stores credentials in a local encrypted vault. The agent works with secret names and selects what a command needs: keyclasp run --project myapp --environment dev --env API_KEY -- npm test The child process receives the requested token through its environment. The agent can list available secret names, but cannot retrieve the values. I also include a skill that explains the workflow. You can optionally require operator authorization when passing secrets. Everything is local and open source. It's not bulletproof and the command still needs to be trusted: it receives the real credential and can write it to disk or send it over the network, but that's ok in most cases as many agents sandbox disk or network anyway. An output guard scans stdout and stderr for exact injected values of at least eight characters. If it detects one, it redacts the match, stops forwarding output, and attempts to terminate the process group. Shorter values, encoded values, and fragments are outside that protection. You can install it with: npm install -g keyclasp@beta It’s MIT licensed and began as a fork of https://keyblind.dev/, created by Mohammed Aarif Shaikh. How are you handling credentials for local coding agents today? I’d be interested in approaches I missed and places where this workflow falls short.
2026-09-06
alphaparkinc/genpark-canary-honeytoken-private-key-tripwire-skill
未评级
Honeytoken decoy private key tripwire detecting mempool intrusions (CertiK / OpenZeppelin)