1
Show HN: MTLS with keys never leaving the TPM
TPM密钥永不离芯片，Go实现TLS 1.3安全认证，开源项目带你玩转硬件级加密
Article URL: https://github.com/bschaatsbergen/go-tpm-tls Comments URL: https://news.ycombinator.com/item?id=49062316 Points: 2 # Comments: 1
2
Aesecnryption demo site
纯浏览器端 AES 加密，密钥与明文不离开页面，并附带 PHP、Java、Python、Go 多语言后端兼容实现。
I rebuilt aesencryption.net so text AES (128/192/256) runs fully in the browser - the key and plaintext never leave the page. The hard part is staying…
3
Show HN: Kiwi – Run agentic dev loops in the cloud, keep keys on your laptop
把AI开发循环搬上云，密钥留在本地，用拉取模型守护代码安全，开源神器。
Article URL: https://github.com/ibreakthecloud/kiwi Comments URL: https://news.ycombinator.com/item?id=48802182 Points: 1 # Comments: 0
4
Show HN: Stop letting Claude Code burn your tokens and leak API keys
在运行Claude Code时实时拦截API调用，防止token过度消耗与密钥意外泄露，守护你的钱包与安全。
Article URL: https://github.com/ashp15205/guardian-runtime Comments URL: https://news.ycombinator.com/item?id=48464199 Points: 2 # Comments: 0
5
Google killed my $1M ARR startup overnight
API密钥被盗后Google封停全账户，百万美金年营收SaaS一夜崩塌的惨痛警示。
Two days ago I had a working company. $1M ARR, 100k users, a product people actually pay for and depend on. Right now it's dead in the water and I'm l…
6
How to stop your coding agent from reading your .env secrets
教你阻止AI编码助手误读.env密钥，保护敏感数据安全。
Open Cursor, Claude Code, or any MCP-enabled agent in your project and ask it to "fix the failing test." To do that, it reads files. Lots of them. And…