Show HN: Knotchy – Open untrusted links in a throwaway VM under the notch

Category: security

Tags: macos, virtualization, security, browser-isolation, swift, linux-vm

Score: 7.8/10 (Innovation: 8, Technical: 8, Documentation: 9, Utility: 6)

Knotchy is a macOS app that opens untrusted links in a disposable Linux VM (using Apple's container runtime) with the browser UI rendered under the MacBook notch. It isolates potentially malicious web content from the host and local network via a carefully configured nftables firewall, streaming H.264 video over a Unix socket. The project combines a native Swift UI, a custom VM agent, and a Chrome extension for seamless link handling.

Target audience: security-conscious Mac users, developers, and privacy advocates

Repository: https://github.com/aculix/knotchy · Swift · MIT · 7 stars

View on Hacker News