1
Aesecnryption demo site
纯浏览器端 AES 加密，密钥与明文不离开页面，并附带 PHP、Java、Python、Go 多语言后端兼容实现。
I rebuilt aesencryption.net so text AES (128/192/256) runs fully in the browser - the key and plaintext never leave the page. The hard part is staying…
2
Show HN: Keyhole – Share secrets with your AI agents
Keyhole 让 AI 代理安全获取 API 密钥，通过本地服务器传递，避免密钥暴露在聊天记录中，保护敏感信息。
I had the idea for Keyhole while bootstrapping a bunch of small services and apps. I'm trying to prototype fast, and sometimes these need a variety of…
3
Show HN: Routing24 – free route optimization agent for Claude Cowork/WebMCP
免费开源路线优化代理，客户端运行无需API密钥，可集成Claude Cowork/WebMCP。
I've been building https://routing24.com for a while, a free route optimization and planning app for businesses. One of the things that bothered me fo…
4
A Guide to Creating Taproot Scripts with Python Bitcoinutils
手把手教你用Python Bitcoinutils库编写Taproot脚本，涵盖密钥路径和脚本路径两种方式，并附有实际地址示例
HODLing is the beginning. But Bitcoin was meant to be programmed. "Not Just HODLing: Real Bitcoin Script Engineering" starts here. Building Taproot ad…
5
6 Security Holes We Keep Finding in Vibe-Coded Apps
揭秘AI编码应用中最常见的6个安全漏洞，从硬编码API密钥到前端授权逻辑，开发者必读的避坑指南。
Across dozens of audits at Inithouse , the same six security issues show up in AI-generated codebases. Not occasionally. Repeatedly. Different teams, …
6
Show HN: Ghbrk – Let AI agents run Git/gh without exposing SSH keys/API tokens
让AI安全执行Git/gh命令，无需暴露SSH密钥或API令牌，保护你的凭证安全。
Article URL: https://github.com/marconae/ghbrk Comments URL: https://news.ycombinator.com/item?id=48758568 Points: 2 # Comments: 0
7
Corv: An SSH client for AI agents (and humans)
专为AI代理设计的SSH客户端，支持安全凭证管理，人类也能用。
Article URL: https://github.com/khalid-src/corv-client Comments URL: https://news.ycombinator.com/item?id=48698681 Points: 3 # Comments: 1
8
《给阿嬷的情书》密钥二延至 7 月 31 日，票房近 19 亿稳居年度亚军
IT之家 6 月 23 日消息，据灯塔专业版，由大麦娱乐出品的电影《给阿嬷的情书》第二次密钥延期，将延长放映至 7 月 31 日。 截至当前，该影片累计票房 18.62 亿元，仅次于 44.2 亿元票房的《飞驰人生 3》， 暂列 2026 年度票房亚军 。《给阿嬷的情书》自五一档上映以来，迎来票房口…
9
Show HN: Generate images from the CLI with a ChatGPT subscription (no API key)
无需API key，有ChatGPT订阅即可在命令行直接生成图像，超实用的小工具。
Article URL: https://github.com/leeguooooo/chatgpt-imagegen Comments URL: https://news.ycombinator.com/item?id=48626459 Points: 1 # Comments: 0
10
I built a tool that catches leaked secrets before `npm publish` — then GitHub caught mine
用自己构建的npm预检工具防密钥泄露，却被GitHub反杀，一个开发者的实战故事与开源方案。
We've all seen the horror stories: someone leaks an API key and wakes up to a $30k cloud bill, or accidentally publishes private code that's now publi…
11
Show HN: Cloak – let AI agents use your API keys without ever seeing them
Cloak 帮你安全地把 API 密钥交给 AI 代理，模型和日志永远看不到密钥，防止提示注入泄露。
Article URL: https://github.com/cloakward/cloak Comments URL: https://news.ycombinator.com/item?id=48618904 Points: 2 # Comments: 0
12
Accidentally Pushed a `.env` Secret to a Public GitHub Repo? Here's What to Do
意外泄露环境变量？这5步紧急处理流程帮你安全收尾，别慌！
Exposing secrets in a public GitHub repository is a real production emergency. Public repositories are continuously scanned by automated bots, and lea…
13
让换机更容易：谷歌 Android 17 系统将支持迁移苹果 iOS 通行密钥、Wi-Fi 记录、RCS 信息等
谷歌Android 17系统新增跨平台数据迁移、AI深度集成与内存管控，换机更轻松
IT之家 6 月 17 日消息，据科技媒体 Android Authority 今天报道，谷歌从去年开始和苹果合作，意图让 Android 与 iOS 之间的换机流程更加顺畅。 如今这些合作终于落地 ，最近发布的 Android 17 系统引入了全新迁移数据工具“Android Switch”。 I…
14
Lost my first crypto from key theft from a project linked wallet
GitGuardian 自动扫描你的代码仓库，及时发现意外提交的密钥和凭证，防止因 git 误操作导致资产丢失。
Ive been using ClaudeCode, Im not complaining, it could of been any AI, but maybe this new Mythos/Fable release has massively increased attack surface…
15
LLM suppliers should offer PR scoped ephemeral keys
LLM供应商应推出PR限定临时密钥，让贡献者为AI代码审查买单，解决维护者成本困境。
LLMs make PRs cheaper to create than to review (many to one relationship). In my case, as a repo maintainer, I usually run my prompts and workflow to …
16
A python terminal writer with git, github e2ee sync, hardware bound keys and temporal search
一款Python终端笔记工具，支持Git/GitHub端到端加密同步、硬件密钥绑定与时间搜索，保护隐私又高效。
📓 Terminal Notes sys-ronin / terminal-notes Terminal notes - Git, encryption, free E2EE sync, cognitive UI 📓 Terminal Notes Encrypted terminal-based w…
17
Show HN: Stop letting Claude Code burn your tokens and leak API keys
在运行Claude Code时实时拦截API调用，防止token过度消耗与密钥意外泄露，守护你的钱包与安全。
Article URL: https://github.com/ashp15205/guardian-runtime Comments URL: https://news.ycombinator.com/item?id=48464199 Points: 2 # Comments: 0
18
AI-noleak – Local secret proxy for AI CLIs
本地代理拦截AI CLI中的敏感信息，用placeholder替换，防止密钥泄露。
Article URL: https://github.com/ahmedxuhri/ai-noleak Comments URL: https://news.ycombinator.com/item?id=48455280 Points: 1 # Comments: 0
19
I Checked the Free OpenAI API Key Myth. The Key Is Free. Usage Is Not.
揭露免费OpenAI API密钥的真相——密钥免费但使用按量计费，别再被“免费”误导。
I keep seeing the same three claims in developer forums: "You can get a free OpenAI API key." "ChatGPT Plus includes API credits." "No credit card mea…
20
EnvArmor: AI-Aware Env Secrets Security Platform
开源环境变量安全平台，AI感知检测API密钥，本地AES-256加密后云同步，防止敏感信息泄露。
This is a submission for the GitHub Finish-Up-A-Thon Challenge Github Repo Link : https://github.com/AliRana30/EnvArmor npm package : https://www.npmj…