Alternatives
Products that do what Co-locating Debian Bullseye with an evil maid does
In order to facilitate the secure co-location of a server, I looked into protecting a Debian Bullseye system from evil maid attacks. In addition, since I've enjoyed using ZFS for some time, I decided to rely on a natively encrypted ZFS root file system. Basically... I'd like to take a system containing sensitive information, box it up, and drop it in the mail without worrying about losing it or having it wind up in the wrong hands. A couple of things became clear while researching how to do this. First, there should be little chance that a rogue data-center admin can insert malicious…
- 1AP
2020 · github.com
- 2
- 3
- 4OT
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com
- 5AF
Recently I've been playing with an idea of a file server on my Android phone, with a web browser access. I wanted to replace: - AirDroid - sending files to my own PC or laptop. - ShareIt - sending big files over the local network to my family devices. - Dropbox - sharing select files with other people over the Internet. Requirements I had in mind: - end-to-end encryption, no sign ups, no accounts, no passwords - local connection if devices are on the same network - asynchronous access, server should work seamlessly in the background This week I finally managed to stitch the pieces together…
2020
- 6SA
2015 · github.com
- 7AS
I reposted, since i forgot the Show HN prefix. When I looked at self-hosted options, true E2EE turned out to be surprisingly rare. Most solutions rely on disk encryption, which only protects against physical theft, not server compromise or admin access. So I built Agam Space, my attempt at a self-hosted alternative to Mega or Proton Drive. It uses proper zero-knowledge encryption. Files are encrypted in the browser, and the server only stores encrypted blobs. Admins literally cannot access the files. It’s still in early beta, with very basic functionality and no professional security audit…
Jan 2026 · github.com
- 8WR
Hi HN, I previously wore SWE/SRE hats on GCP. Later, I was on the other side, managing thousands of machines. The friction points of onboarding and operating cloud systems are personal problems to me. I’ve found it hard to keep track of all the random cloud resources floating around, especially as my team’s assets proliferated. Occasionally, there is a resource affecting an outage but no one remembers where it is. I am constantly frustrated by existing tooling. APIs can work, after you’ve navigated the byzantine documentation, but I often find myself doing ad-hoc tasks which are best…
2022 · listvms.com
- 9TL
I'm Dustin Kirkland, author of Byobu[1]. I built Trustmux[2] to solve a personal problem: secure, encrypted access to my tmux[3] and Byobu sessions from my phone, without the pain of other mobile shell approaches. I run long-lived shells, Claude, and other sessions in the background on my workstation, and I needed to check in from mobile — securely, with real TLS certificates and Tailscale-backed privacy, not some insecure workaround. Why not SSH / Mosh / Claude Mobile? - SSH/Mosh: Synchronous connection state is brutal on mobile. Latency, network handoffs between WiFi and…
Jun 2026 · trustmux.dev
- 10BX
Hi HN, I’m the founder of https://b2v.xyz, a service that protects organizations against impersonation attacks. The problem I’m trying to solve stems from the following observation: while end-user authentication methods are becoming more advanced as cybersecurity evolves, organizations aren't experiencing the same improvements when we reverse the roles, i.e. when organizations authenticate themselves to their users. This imbalance leaves a gap in secure communications that B2V aims to close. Bad actors have countless ways to pose as trusted entities — through phishing, smishing,…
2024 · get.b2v.xyz
- 11CS
Hey HN! Coolify and Kamal were "nice" (Kamal docs are pretty bad, actually), but I still had to configure firewalls, unattended-upgrades, and Fail2ban every single time. Ciara does all of this from a single configuration file. Features: Integrated Firewall Automatic System Updates Zero-Config OS Ready Zero-Downtime Deployments Automatic HTTPS support Multiple Servers Deployments Would love your feedback and happy to answer any questions!
2025 · ciara-deploy.dev
- 12SH
Needed this in my own work, anonymizing PII/PHI and decided to build this because presidio didn't really cut it for our use-case. Try it and maybe let me know if you have any feedback :)
2025 · github.com
- 13HM
I made this as a pair programming exercise with o1-preview. o1 did most of the heavy lifting, through high level prompts, but eventually I needed to diverge from it to get to completion. My initial prompt was: --- I'm making a web app: It's like 4chan, but each thread starts with a gps coordinate. People can only post text and images. I want to build it with flask and sqlalchemy. I want just the backend and data model that supports these threads, anonymous users, and users that can register a permanent username. Write as much of it as you can for me. --- This produced a fully scaffolded…
2024 · mapchan.com
- 14OT
ssh 85.27.249.130 -p 2222 username / password does not matter Enjoy asci[l]icious lava lamp action right in your console. Quickly hacked together in node, using a fifo file, hasciicam and the ssh2 library, running in docker for "security" :)
2020
- 15SE
Hello. I made this project as an experiment in using key cryptography for user identity in a client server model, and for some future peer to peer projects that I am working on. I am looking for feedback, please let me know what you think. Also, Merry Christmas to HN! :-)
2022 · github.com
- 16LF
Hi HN, I just wanted to share what I have been working on for the past few months: A firmware analyzer for embedded Linux systems that helps uncovering security issues running entirely in the browser. This is a very early Alpha. It is going to be rough around the edges. But I think it provides quite a lot of value already. So please go ahead and drop a firmware (only .tar rootfs archives for now) and try to break it :)
Mar 2026 · xray.boldwark.com
- 17AM
I recently finished a round of tweaks on my barebones mud-server and thought HN might be interested. https://github.com/endgame/MudCore It sits somewhere between socketmud and a full mud like tbamud in that it handles all the socket work and telnet negotiation, but it makes no assumptions about anything else. The other interesting thing is that it can talk to other services using ZeroMQ. I'm interested in reactions, particularly in terms of coding style, documentation quality and so on. It's my main "presentation piece" so far, in that it's some of the first code I actually feel proud to…
2012
- 18IB
Hi HN, I’m the creator of Cordum. I’ve been working in DevOps and infrastructure for years (currently in the fintech/security space), and as I started playing with AI agents, I noticed a scary pattern. Most "safety" mechanisms rely on system prompts ("Please don't do X") or flimsy Python logic inside the agent itself. If we treat agents as autonomous employees, giving them root access and hoping they listen to instructions felt insane to me. I wanted a way to enforce hard constraints that the LLM cannot override, no matter how "jailbroken" it gets. So I built Cordum. It’s an open-source…
Jan 2026 · github.com
- 19CA
Hello HN, What is CambiOS? A microkernel OS built in Rust, that boots in QEMU under x86_64, AArch64, and RISC-V - targeting formal verification. Processes are assigned unforgeable cryptographic identity and IPC gates access to only allowed endpoints. What does it want to be? Ambitious. Cutting away latent security issues, corporate surveillance, centralized identity and data hosting, and OPEN. With the advent of the coding tools, building the things we want is a bit less of a lift. Could it replace Windows? Sure. That's where the idea was born. Secure and intuitive, in a nutshell. I've been…
Jun 2026 · github.com
- 20RS
Hi HN! I've been hacking on this side project for the last month or two with the goal of making it dead simple to use cloud GPUs. I ran into this problem personally during the phd, and built my own tooling around it. I always thought it'd be fun to try to turn that tooling into a more general product... and bitbop.io is the result! All you have to do is run `ssh bitbop.io`, and you get your own personal dev GPU workstation in the cloud. Looking forward to hearing your thoughts!
2024 · twitter.com
- 21NS
Hey everyone, I was always tired of setting up PowerDNS, Bind and PiHole and I am trying to do more projects in Rust, so here is Nomina. It has: * Split Horizon DNS (return a different IP/record if remote IP is in a certain network etc) * DynDNS Support * Blocklist Integration * DHCP4+6 Server * AXFR/IXFR support * Rewriting of records It can replace most of the common Home Lab setups incl. PiHole AdBlocking etc. https://github.com/DatanoiseTV/Nomina
Jun 2026
- 22PA
Hi HN! After several months of work, I'm excited to share ProKZee, a free and open-source network security tool built with Go and React using Wails framework. ProKZee allows developers, security researchers, and penetration testers to intercept, inspect, and modify HTTP/S traffic — similar to tools like Burp Suite, OWASP ZAP, and Caido — but with a fast native UI, modern UX, and some unique features. https://github.com/al-sultani/prokzee
2025 · github.com
- 23
- 24NQ
Hey HN, We're building ncrypt, an open-source encrypted file manager that allows you to store, manage, and privately query your files using fully homomorphic encryption (FHE). This project originally started as a simple SFTP-like CLI for my personal S3 buckets which I used to send and retrieve encrypted files and have more granular control over key rotation. As the number of files that I was storing grew, file discovery started to become a problem, and I found myself frequently having to download and decrypt files to inspect their contents. Rather than leaving them unencrypted in S3 and…
2025 · github.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →