security on Hacker News

256 titles from 216 authors in the last 30 days, with 243 distinct links and 24 Show HN.

Counts titles, it does not confirm facts. Open the source before concluding anything.

Projects on this term

The score comes from our model.

• Show HN: Keyward – a TUI to manage SSH keys and audit your –/.ssh security · score 7.3

  Keyward is a terminal UI and CLI for managing SSH keys, editing ~/.ssh/config with byte-identical round-trip serialization, auditing security with A-F grades, and creating encrypted backups. It combines key management, config editing, security auditing, and encrypted metadata/backups into a single static binary, filling a gap for developers who want a safer, more visual way to handle their SSH setup.

• Show HN: Hashling, an open-source Mac security agent your own AI can talk to · score 7.3

  Hashling is a macOS security agent that monitors AI agents, network connections, and mobile devices, explaining threats in plain language and requiring Touch ID for any changes. It stands out by integrating with LLM-based assistants via MCP, enabling users to query their own AI security engineer, while providing a user-friendly interface for non-experts. The project combines multiple open-source tools for device checks and emphasizes privacy with local-only operation.

• Show HN: Bomfather, eBPF Runtime Security · score 7.3

  Bomfather Agent is an eBPF-based runtime security tool that enforces fine-grained, executable-based policies for file, network, and GPU access using Linux Security Modules. It simplifies kernel-level sandboxing with short YAML policies and a default-deny approach, offering high performance and granular control. The project stands out for its simplicity and efficiency compared to existing solutions like strace.

• Show HN: Mcpward – contract and security testing for MCP servers in CI · score 7.3

  MCPward is a contract and security testing tool for MCP servers, designed to run in CI pipelines. It snapshots server contracts (tool schemas, descriptions, annotations) and detects drift, flagging breaking changes, security issues like tool poisoning, and protocol violations. It fills a gap in MCP tooling by treating servers as dependencies with enforceable contracts.

Recent titles

1. Talos 0.20.0-RC.2 – Security release candidate
   2026-11-01 · github.com · HN discussion
2. State of Security Champions Report
   2026-11-01 · katilyst.com · HN discussion
3. Proton senior management prioritizes AI over security
   2026-10-31 · consumerrights.wiki · HN discussion
4. Social Security Administration Best Performance in Agency History
   2026-10-31 · ssa.gov · HN discussion
5. A lightweight webhook security scanner
   2026-10-31 · hookshield.co.uk · HN discussion
6. Some thoughts on security after ten years of qmail 1.0 (2007) [pdf]
   2026-10-31 · cr.yp.to · HN discussion
7. Tell HN: Warp.dev Security Incident
   2026-10-31 · HN discussion
8. Punchy – a security Tamagotchi that boxes the internet
   2026-10-31 · punchy.virtualserv.uk · HN discussion
9. Scribd Security Incident
   2026-10-31 · support.scribd.com · HN discussion
10. Security Podcast
    2026-10-31 · risky.biz · HN discussion
11. Linode Security Incident
    2026-10-30 · status.linode.com · HN discussion
12. Chainalysis Security Incident Information
    2026-10-30 · chainalysis.com · HN discussion
13. October Security Incident
    2026-10-30 · dreamhost.com · HN discussion
14. Bunny CDN Security Incident
    2026-10-30 · status.bunny.net · HN discussion
15. Show HN: Offense – Security tools for your agents
    2026-10-30 · github.com · HN discussion
16. Show HN: Keyward – a TUI to manage SSH keys and audit your –/.ssh security
    2026-10-30 · github.com · HN discussion
17. AO3 down 2-4 weeks after security incident; user database theft not ruled out
    2026-10-30 · transformativeworks.org · HN discussion
18. Personal Agent's Voice Security
    2026-10-30 · github.com · HN discussion
19. Northflank PaaS – Security Incident
    2026-10-30 · status.northflank.com · HN discussion
20. Hackers Swipe Millions from Polymarket Users in Latest Security Breach
    2026-10-30 · wsj.com · HN discussion
21. How Open Source Communities Help Respond Quickly to Security Risks
    2026-10-30 · openteams.com · HN discussion
22. Josh Kushner's Thrive and OpenAI to buy home security firm ADT
    2026-10-30 · ft.com · HN discussion
23. DebugBear Security Incident
    2026-10-29 · twitter.com · HN discussion
24. Show HN: DissPair APK– Portable BLE and Bluetooth Classic Security Testing
    2026-10-29 · github.com · HN discussion
25. Home Security Firm ADT Purchased by Thrive Holdings for $7.6B
    2026-10-29 · reuters.com · HN discussion
26. GeDefense TV – local-first security console for Android TV / Google TV
    2026-10-29 · github.com · HN discussion
27. WebRTC Streaming Video with Offline Installations for Additional Security
    2026-10-29 · red5.net · HN discussion
28. Advisories in Five Months: Results from the Drupal AI Security Initiative
    2026-10-29 · drupal.org · HN discussion
29. Show HN: Vibecheck – a pre-launch security audit for AI-built apps
    2026-10-29 · github.com · HN discussion
30. Show HN: SetEnforce – Domain security scans mapped to NIS2, ISO 27001 and BSI
    2026-10-29 · setenforce.org · HN discussion

All trends