Alternatives
Products that do what CambiOS – a new Rust-based, sovereign identity, zero-trust OS does
Hello HN, What is CambiOS? A microkernel OS built in Rust, that boots in QEMU under x86_64, AArch64, and RISC-V - targeting formal verification. Processes are assigned unforgeable cryptographic identity and IPC gates access to only allowed endpoints. What does it want to be? Ambitious. Cutting away latent security issues, corporate surveillance, centralized identity and data hosting, and OPEN. With the advent of the coding tools, building the things we want is a bit less of a lift. Could it replace Windows? Sure. That's where the idea was born. Secure and intuitive, in a nutshell. I've been…
- 1SA
2017 · github.com
- 2VQ
2020 · github.com
- 3AC
I built this toolkit with my colleague to dive deep into OS internals and automate the identification of privilege escalation vectors. Written in pure C without external dependencies, it explores everything from Linux capabilities and Docker escapes to Windows token manipulation and service permissions. We believe that the constant struggle between breaking and securing systems is the ultimate driver of software evolution. This tool is our contribution to that cycle, designed for researchers who want to understand how low-level misconfigurations can be discovered and audited across different…
Jan 2026
- 4IB
I've always been fascinated by cryptographic principles, so I decided to dive deep into zero-knowledge proofs and implement a Groth16 proof verifier entirely in Rust. This project validates cryptographic proofs and demonstrates how succinct, verifiable computations can be achieved. Using Rust's powerful libraries like arkworks, I implemented pairing checks, public input commitments, and proof validation logic while ensuring the code remains modular and efficient. I handled the complexities of affine group operations, scalar multiplications, and optimized public input verification to make…
2024 · github.com
- 5LZ
Lilith Zero is a high-performance security runtime designed to mitigate data exfiltration and unauthorized tool invocation in LLM-based agent systems. By interposing at the transport layer, Lilith Zero enforces security invariants through deterministic policy evaluation and strictly framed execution. Lilith Zero is OS, framework, and language agnostic, providing uniform security primitives across diverse implementation environments.
Apr 2026 · github.com
- 6OT
2021 · github.com
- 7SS
Hi HN! I've been building a project that handles high-value credentials in-process, and I wanted something more robust than just zeroing memory on drop. A comment on a recent Show HN[0] made me realize that awareness of lower-level memory protection techniques might not be as widespread as I thought. The idea here is to pull out all the tools in one crate, with a relatively simple API. * mlock/VirtualLock to prevent sensitive memory from being swapped (eg the KeePass dump) * Core dump exclusion using MADV_DONTDUMP on Linux & Android * mprotect to minimize exposure over time * Guard…
Mar 2026 · github.com
- 8RA
Hi, I've made a Dis virtual machine and Limbo programming language compiler (called RiceVM) in Rust. It can run Dis bytecode (for example, Inferno OS applications), compile Limbo programs, and includes a fairly complete runtime with garbage collection, concurrency features, and many of the standard modules from Inferno OS's original implementation. The project is still in an early stage, but if you're interested in learning more about RiceVM or trying it out, you can check out the links below: Project's GitHub repo: https://github.com/habedi/ricevm RiceVM documentation:…
Apr 2026
- 9SE
Hello. I made this project as an experiment in using key cryptography for user identity in a client server model, and for some future peer to peer projects that I am working on. I am looking for feedback, please let me know what you think. Also, Merry Christmas to HN! :-)
2022 · github.com
- 10WB
Over the past few months, as we scaled our internal AI Agents, we hit a dead end: Running LLM-generated arbitrary code in Docker is basically running naked on security due to container escape risks. But using full traditional VMs takes minutes to boot and eats too much memory to support high-density concurrency. We loved the developer experience of SaaS sandboxes on the market, but they are closed-source, expensive, and have too high a barrier to entry for self-hosting. So, our team decided to build our own. After months of grinding, using RustVMM and KVM, we built a blazing-fast,…
Apr 2026 · github.com
- 11NA
Hi, over the past few months I've been working on this project: Numax is a small Rust runtime that does three things: it runs WebAssembly modules in a sandbox, has a built-in local key-value store, and syncs everything across nodes with CRDTs and gossip. Basically, you write a wasm module, run it on two machines, and they converge (I hope !). It's a decentralized system... I hope someone finds it interesting! There's a whitepaper I've put a lot into, and I think the code isn't bad either! I believe there's still room in this world for software that's fun and well made, and while building…
Jun 2026 · github.com
- 12RA
2017 · github.com
- 13HA
This was a lot of fun! Using Claude to start, and then Cursor to make more complicated changes, I made a Hacker News CLI, built in Rust, that has a sweet loading screen ;) Wanted a neat way to browse hacker news, and this was a fun start. Just a 4.7M binary on macOS.
2024 · github.com
- 14PO
Hello HN! We are developers and security researchers making tools for developers to encrypt data at an application level while maintaining sole control of their keys. We believe that data should always be encrypted unless it is part of an active computation. Encryption is relatively easy, but key management is challenging. There are plenty of encryption tools and SDKs that are out there (Hashicorp Vault, AWS KMS etc.) but we are focusing on ease and speed of implementation, developer experience and self custody of keys. A few months ago, we quit our jobs and started full time on Phase. So…
2023 · github.com
- 15AA
Hey HN! I really like local apps for their simplicity and privacy and hate paying Saas bills and I wanted a way to start automating my life with AI so I started building Anything. Anything is built on Tauri so the front end is React and the "backend" is Rust. It's 100% local & 100% doesn't ask you to spin up docker to use. Another core goal of the app is to get away from "package bloat" you see in other general purpose AI oss projects where they have a package.json that is 300 lines long ( more on that later. ) Oh btw I suck at Rust! I learned Rust while building this so the code is _not…
2024 · github.com
- 16AO
Remote Code Oxidation is a collection of tools that help offensive security professionals quickly adapt payloads to the needs of their engagement. Any and all feedback is welcome!
2022 · github.com
- 17DI
I built an open-source malware detection daemon that monitors all running processes in real-time using ML + heuristics. No kernel modules or eBPF required. Key points: - Polls /proc for new processes (works on any Linux kernel 2.6+) - Random Forest model trained on EMBER 2018 dataset (2.3M samples) - Heuristic rules for crypto miners, ransomware, rootkits - ~20MB RAM, <1% CPU, sub-millisecond scan latency - Pure C, zero runtime dependencies - Model embedded directly in binary (50KB) Why I built this: Existing solutions either require modern kernels (eBPF) or are heavy/proprietary.…
Nov 2025 · github.com
- 18LF
Hi HN, I just wanted to share what I have been working on for the past few months: A firmware analyzer for embedded Linux systems that helps uncovering security issues running entirely in the browser. This is a very early Alpha. It is going to be rough around the edges. But I think it provides quite a lot of value already. So please go ahead and drop a firmware (only .tar rootfs archives for now) and try to break it :)
Mar 2026 · xray.boldwark.com
- 19SH
Needed this in my own work, anonymizing PII/PHI and decided to build this because presidio didn't really cut it for our use-case. Try it and maybe let me know if you have any feedback :)
2025 · github.com
- 20ST
2019 · dev.to
- 21IB
Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com
- 22GA
Hi All, I felt like I was re-inventing the wheel by bolting similar channel architectures onto different Go structs repeatedly so I decided to extract some common types into into one library so that they would be easier to re-use: - oneshot - spsc - spmc - mpsc - mpmc - broadcast - watch The types are inspired by Rust channels so if you're coming from Rust they should feel familiar. So far I'm really enjoying using them but it'd be great to get some external feedback if you have time! https://github.com/amorey/gochan Andres
May 2026 · github.com
- 23IB
Definitely one of those "20 minute adventure gone wrong" projects where all I wanted initially was a quick wireless rubber ducky for bitlocker keys and the like and then I kept adding stuff like AES-256..... Currently working on adding WebAuthn/FIDO support because the hardware is already there and scope creep is a lifestyle at this point. Would love feedback, especially on the security side. Repo and PCB files are fully open source.
Jul 2026 · github.com
- 24DO
I’ve developed a new public-key encryption scheme (DIAC) that uses multidimensional, high-precision complex keyspaces and a modular trapdoor function for ultra-high entropy and quantum resistance. The code, benchmarks, and research paper (PDF) are all open-source: https://osf.io/mvkcq/ Would love feedback, questions, or cryptanalysis!
2025 · osf.io
Ranked by how close each launch is in meaning, then by votes. Refine with a description →