{"exhaustive":{"nbHits":false,"typo":false},"exhaustiveNbHits":false,"exhaustiveTypo":false,"hits":[{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"todsacerdoti"},"title":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Integrate 1Password with Obsidian Security for extra peace of mind"},"url":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"https://blog.1password.com/1password-obsidian-security-integration/"}},"_tags":["story","author_todsacerdoti","story_37689401"],"author":"todsacerdoti","created_at":"2023-09-28T13:35:52Z","created_at_i":1695908152,"num_comments":0,"objectID":"37689401","points":2,"story_id":37689401,"title":"Integrate 1Password with Obsidian Security for extra peace of mind","updated_at":"2024-09-20T15:17:32Z","url":"https://blog.1password.com/1password-obsidian-security-integration/"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"malwarenews"},"title":{"matchLevel":"none","matchedWords":[],"value":"SaaS Ransomware Observed In-the-Wild for Sharepoint Online"},"url":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"https://www.obsidiansecurity.com/blog/saas-ransomware-observed-sharepoint-microsoft-365/"}},"_tags":["story","author_malwarenews","story_36232031"],"author":"malwarenews","children":[36232953],"created_at":"2023-06-07T19:17:42Z","created_at_i":1686165462,"num_comments":1,"objectID":"36232031","points":7,"story_id":36232031,"title":"SaaS Ransomware Observed In-the-Wild for Sharepoint Online","updated_at":"2024-09-20T14:12:59Z","url":"https://www.obsidiansecurity.com/blog/saas-ransomware-observed-sharepoint-microsoft-365/"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"jc_811"},"title":{"matchLevel":"none","matchedWords":[],"value":"Self-Service Password Reset (SSPR) Abuse in Azure Ad"},"url":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"https://www.obsidiansecurity.com/blog/behind-the-breach-self-service-password-reset-azure-ad/"}},"_tags":["story","author_jc_811","story_36964571"],"author":"jc_811","children":[36967141],"created_at":"2023-08-01T23:12:21Z","created_at_i":1690931541,"num_comments":6,"objectID":"36964571","points":6,"story_id":36964571,"title":"Self-Service Password Reset (SSPR) Abuse in Azure Ad","updated_at":"2024-09-20T14:49:21Z","url":"https://www.obsidiansecurity.com/blog/behind-the-breach-self-service-password-reset-azure-ad/"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"13ph03nix"},"title":{"matchLevel":"none","matchedWords":[],"value":"Breaking LiteLLM: From Low-Privilege User to Admin and RCE"},"url":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"https://www.obsidiansecurity.com/blog/litellm-privilege-escalation-rce"}},"_tags":["story","author_13ph03nix","story_48498028"],"author":"13ph03nix","children":[48498041,48498125],"created_at":"2026-06-11T23:54:00Z","created_at_i":1781222040,"num_comments":0,"objectID":"48498028","points":4,"story_id":48498028,"title":"Breaking LiteLLM: From Low-Privilege User to Admin and RCE","updated_at":"2026-06-12T09:28:46Z","url":"https://www.obsidiansecurity.com/blog/litellm-privilege-escalation-rce"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"13ph03nix"},"title":{"matchLevel":"none","matchedWords":[],"value":"1-Click RCE in Flowise (CVE-2026-40933)"},"url":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"https://www.obsidiansecurity.com/blog/when-is-stdio-mcp-actually-a-vulnerability"}},"_tags":["story","author_13ph03nix","story_48305326"],"author":"13ph03nix","created_at":"2026-05-28T06:24:18Z","created_at_i":1779949458,"num_comments":0,"objectID":"48305326","points":2,"story_id":48305326,"title":"1-Click RCE in Flowise (CVE-2026-40933)","updated_at":"2026-05-28T13:48:19Z","url":"https://www.obsidiansecurity.com/blog/when-is-stdio-mcp-actually-a-vulnerability"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"jackson12t"},"story_text":{"fullyHighlighted":false,"matchLevel":"partial","matchedWords":["obsidian"],"value":"I put this tool together a few years back, and just recently got around to making it robust enough to share: https://github.com/pangolinsec/shihtzu

It parses ldapsearch or dsquery output and writes markdown files with some extra logic added in so you can visualize nested memberships when you open the folder with Obsidian and use the graph view--it's kind of like a very low-powered Bloodhound (https://github.com/SpecterOps/BloodHound) in that sense, but it is also much quieter. It also parses `useraccountcontrol` and some of the logon-relevant attributes in AD to automatically tag accounts that are particularly interesting or uninteresting to attackers.

Some core features:\n- Parses LDAP attributes from text files into structured Obsidian markdown\n- Intelligently categorizes objects as Users, Groups, or Computers\n- Automatically identifies administrators and administrative privileges\n- Detects potentially risky account configurations (stale accounts, low logon counts)\n- Creates Obsidian links between related objects to enable network visualization\n- Processes UserAccountControl (UAC) values with explanations\n- Converts Windows timestamps to human-readable format\n- Smart append mode that only adds new data to existing files\n- Tagging for easy filtering and searching in Obsidian

It's not novel, but it's been quite useful for me in a few situations."},"title":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Show HN: Visualizing AD data for security with Python and Obsidian"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://github.com/pangolinsec/shihtzu"}},"_tags":["story","author_jackson12t","story_43568958","show_hn"],"author":"jackson12t","created_at":"2025-04-03T12:59:09Z","created_at_i":1743685149,"num_comments":0,"objectID":"43568958","points":3,"story_id":43568958,"story_text":"I put this tool together a few years back, and just recently got around to making it robust enough to share: https://github.com/pangolinsec/shihtzu

It parses ldapsearch or dsquery output and writes markdown files with some extra logic added in so you can visualize nested memberships when you open the folder with Obsidian and use the graph view--it's kind of like a very low-powered Bloodhound (https://github.com/SpecterOps/BloodHound) in that sense, but it is also much quieter. It also parses `useraccountcontrol` and some of the logon-relevant attributes in AD to automatically tag accounts that are particularly interesting or uninteresting to attackers.

Some core features:\n- Parses LDAP attributes from text files into structured Obsidian markdown\n- Intelligently categorizes objects as Users, Groups, or Computers\n- Automatically identifies administrators and administrative privileges\n- Detects potentially risky account configurations (stale accounts, low logon counts)\n- Creates Obsidian links between related objects to enable network visualization\n- Processes UserAccountControl (UAC) values with explanations\n- Converts Windows timestamps to human-readable format\n- Smart append mode that only adds new data to existing files\n- Tagging for easy filtering and searching in Obsidian

It's not novel, but it's been quite useful for me in a few situations.","title":"Show HN: Visualizing AD data for security with Python and Obsidian","updated_at":"2025-04-03T21:17:32Z","url":"https://github.com/pangolinsec/shihtzu"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"kjksf"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"I took a small break from coding SumatraPDF and wrote a note taking application that is perfect for me: https://edna.arslexis.io/

Edna is a note taking app for developers and power users. A cross between Obsidian and Notational Velocity.

Markdown, plain text, code, works in browser so no installation required, private (notes are stored in your browser or disk) and secure (can encrypt notes with a password).

The story so far.

I was always attracted to editors with minimalistic UI, like https://mak.ink/, simplenote, Notational Velocity. I like having most of the screen estate for writing because writing and editing is what note taking apps are for.

But: most of them are very thin on features and UI.

I saw Heynote and it was one of those minimalistic writing UIs with not many features.

I liked their concept of dividing notes into blocks so I forked Heynote and started coding.

The goal was to combine writing-oriented, minimalistic main UI while also providing on-demand UI for features and efficient operation. Things like context menu, type-down note switcher, command palette, quick access shortcuts, plenty of keyboard shortcuts.

Another goal was privacy and security. The notes never leave your computer and can be encrypted with a password. It also makes the code simpler because I don't need any backend storage, user accounts and auth etc.

Sadly, only Chrome and Edge provide the necessary file system api, on other browser you can only store notes in local storage, which means no sharing between computers or accessing the notes with other software.

40 working days and 528 commits later, here's what I've added:

  * added support for multiple notes\n  * ability to store notes on disk\n  * and if you store notes in a directory managed by DropBox, OneDrive etc., you get sharing of notes between computers\n  * Ctrl + P: UI for switching between notes, creating new notes, deleting notes, inspired by Notational Velocity\n  * Ctrl + Shift + P: command palette like in vs code\n  * context menu to access frequently used functionality\n  * Ctrl + E to open note from history (list of recently opened notes)\n  * ability to assign Alt + 0 ... Alt + 9 quick access shortcuts \n  * ability to encrypt notes with a password\n  * export all notes to a .zip file\n  * automatic, daily backup of notes to a .zip file (optiona, see Settings)\n  * Ctrl + B to navigate between blocks\n  * re-designed Settings UI\n  * added ability to execute Go blocks\n  * support Svelte and Vue in code blocks\n  * ported the UI code from Vue to Svelte 5, just because I could\n  * converted from desktop app to run in the browser\n
\n(Ctrl is on Windows, on Mac it's \u2318).

I've been using it daily while working on it. 94 notes and counting.

I still have ideas for improvements but it has all the core features for productive work.

The app: https://edna.arslexis.io/

The code: https://github.com/kjk/edna"},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: Edna, note taking app for developers"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://edna.arslexis.io/"}},"_tags":["story","author_kjksf","story_40846242","show_hn"],"author":"kjksf","children":[40848439,40848481,40849785,40849825,40849896,40850252,40850560,40850617,40850900,40851311,40851579,40851667,40852056,40852416,40852617,40853313,40853652,40853979,40853984,40854604,40854657,40854818,40854874,40855081,40855409,40855863,40856204,40856625,40857214,40858751,40859401,40859702,40860680,40863294,40892152],"created_at":"2024-07-01T14:38:36Z","created_at_i":1719844716,"num_comments":91,"objectID":"40846242","points":331,"story_id":40846242,"story_text":"I took a small break from coding SumatraPDF and wrote a note taking application that is perfect for me: https://edna.arslexis.io/

Edna is a note taking app for developers and power users. A cross between Obsidian and Notational Velocity.

Markdown, plain text, code, works in browser so no installation required, private (notes are stored in your browser or disk) and secure (can encrypt notes with a password).

The story so far.

I was always attracted to editors with minimalistic UI, like https://mak.ink/, simplenote, Notational Velocity. I like having most of the screen estate for writing because writing and editing is what note taking apps are for.

But: most of them are very thin on features and UI.

I saw Heynote and it was one of those minimalistic writing UIs with not many features.

I liked their concept of dividing notes into blocks so I forked Heynote and started coding.

The goal was to combine writing-oriented, minimalistic main UI while also providing on-demand UI for features and efficient operation. Things like context menu, type-down note switcher, command palette, quick access shortcuts, plenty of keyboard shortcuts.

Another goal was privacy and security. The notes never leave your computer and can be encrypted with a password. It also makes the code simpler because I don't need any backend storage, user accounts and auth etc.

Sadly, only Chrome and Edge provide the necessary file system api, on other browser you can only store notes in local storage, which means no sharing between computers or accessing the notes with other software.

40 working days and 528 commits later, here's what I've added:

  * added support for multiple notes\n  * ability to store notes on disk\n  * and if you store notes in a directory managed by DropBox, OneDrive etc., you get sharing of notes between computers\n  * Ctrl + P: UI for switching between notes, creating new notes, deleting notes, inspired by Notational Velocity\n  * Ctrl + Shift + P: command palette like in vs code\n  * context menu to access frequently used functionality\n  * Ctrl + E to open note from history (list of recently opened notes)\n  * ability to assign Alt + 0 ... Alt + 9 quick access shortcuts \n  * ability to encrypt notes with a password\n  * export all notes to a .zip file\n  * automatic, daily backup of notes to a .zip file (optiona, see Settings)\n  * Ctrl + B to navigate between blocks\n  * re-designed Settings UI\n  * added ability to execute Go blocks\n  * support Svelte and Vue in code blocks\n  * ported the UI code from Vue to Svelte 5, just because I could\n  * converted from desktop app to run in the browser\n
\n(Ctrl is on Windows, on Mac it's \u2318).

I've been using it daily while working on it. 94 notes and counting.

I still have ideas for improvements but it has all the core features for productive work.

The app: https://edna.arslexis.io/

The code: https://github.com/kjk/edna","title":"Show HN: Edna, note taking app for developers","updated_at":"2026-04-16T05:56:44Z","url":"https://edna.arslexis.io/"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"internxt"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"A deGoogled device is excellent for the privacy and security of a user. Your data is worth a lot, and the hidden tactics used by big corporations are pretty shady.

By limiting the data you send to Google and other big companies, you ensure your Right to Privacy is in place. It takes time to embrace this life, but once you do, you will appreciate not having ads targeted to you or your devices constantly connecting to transmit data to servers.

*Benefits of deGoogling your devices*

1. Privacy for your devices.

2. De-Googled Operating Systems usually are open-source and can be actively checked for bugs and vulnerabilities.

3. De-Googled OS\u2019 is based on stock Android.

4. There aren\u2019t a bunch of trackers running in the background, and you can expect a much better battery life on your phone.

*The best alternative to Google Apps*

\u2022 Google Chrome

\u2014 Firefox - Safari

\u2022 Google Search

\u2014 Duckduckgo - Startpage - Neeva

\u2022 Google Chrome Passwords

\u2014 BitWarden - 1Password - KeePass

\u2022 Google Analytics

\u2014 Matomo - Fathom - Simple Analytics - GoatCounter - Counter.dev

\u2022 Google Mail

\u2014 ProtonMail - Fastmail - Zoho Mail

\u2022 Google Docs

\u2014 Beat Writer - Workflowy - Open Document Reader - Collabora

\u2022 Google sheets

\u2014 Airtable - Zoho - Coda

\u2022 YouTube

\u2014 Vimeo - PeerTube - Dailymotion - Newpipe

\u2022 Google Maps for Websites

\u2014 Leaflet - Mapbox - Nextzen

\u2022 Google Adwords

\u2014 BuySellAds

\u2022 Google Authenticator

\u2014 Authy - 1Password - AndOTP - Aegis

\u2022 Google Blogger

\u2014 WordPress - Medium - Squarespace

\u2022 Google DNS

\u2014 OpenDNS - NextDNS - Quad9

\u2022 Google Drive

\u2014 Internxt - Nextcloud - SyncThing

\u2022 Google Hangouts

\u2014 Telegram - Slack

\u2022 Google Images

\u2014 Unsplash - Pexels - Simple Gallery Pro

\u2022 Google Maps

\u2014 OpenStreetMap - Magic Earth

\u2022 Google Translate

\u2014 Deepl - WordReference - Lingva

\u2022 Google Maps

\u2014 Dark Sky - Weather Underground - OsmAnd

\u2022 Google Calendar

\u2014 Proton Calendar - Simple Calendar Pro - OpenTasks - DAVx5

\u2022 Google Keyboard

\u2014 OpenBoard - AnySoftKeyboard - Florisboard

\u2022 Google Keep

\u2014 Standard Notes - Joplin - Obsidian - Simple Notes Pro

\u2022 Google Podcast

\u2014 AntennaPod

\u2022 Ad-blocker

\u2014 Pi-hole

\u2022 Media

\u2014 Plex - Plexamp

\u2022 Netflix

\u2014 Sonar - Jellyfin

\u2022 Cloud

\u2014 NAS

\u2022 WeTransfer

\u2014 Internxt Send

These are the best alternatives that you can use if you would like to deGoogle your devices. Using Google on your device stores your location every time you turn it on. It stores your search history across all your devices in a separate database, meaning even if you were to delete said history on all your devices, Google would still have a record of it.

That\u2019s the same for anything you\u2019ve watched on YouTube, every app and extension you\u2019ve used. How often you\u2019ve used them. Where you were and who you interacted with. We would like you to understand that we want to give you back the power of protecting and controlling your data. Detaching from Google would be challenging, but to protect your data privacy, you have to be careful in using the internet and the apps that you use.

Update: We will continue to update the list with every comment and suggestions!"},"title":{"matchLevel":"none","matchedWords":[],"value":"Ask HN: How have you deGoogled your life?"}},"_tags":["story","author_internxt","story_32106993","ask_hn"],"author":"internxt","children":[32107033,32107066,32107101,32107203,32107298,32107306,32107312,32107314,32107356,32107370,32107419,32107442,32107462,32107471,32107472,32107495,32107528,32107529,32107653,32107722,32107727,32107729,32107735,32107741,32107760,32107795,32107816,32107892,32107943,32107966,32107979,32108020,32108172,32108182,32108458,32108556,32108684,32108747,32108897,32108941,32109206,32109309,32109954,32109960,32110480,32110855,32111034,32111187,32111676,32111739,32112163,32112456,32113213,32113389,32116500,32124990,32135395,32135596],"created_at":"2022-07-15T11:23:28Z","created_at_i":1657884208,"num_comments":167,"objectID":"32106993","points":118,"story_id":32106993,"story_text":"A deGoogled device is excellent for the privacy and security of a user. Your data is worth a lot, and the hidden tactics used by big corporations are pretty shady.

By limiting the data you send to Google and other big companies, you ensure your Right to Privacy is in place. It takes time to embrace this life, but once you do, you will appreciate not having ads targeted to you or your devices constantly connecting to transmit data to servers.

*Benefits of deGoogling your devices*

1. Privacy for your devices.

2. De-Googled Operating Systems usually are open-source and can be actively checked for bugs and vulnerabilities.

3. De-Googled OS\u2019 is based on stock Android.

4. There aren\u2019t a bunch of trackers running in the background, and you can expect a much better battery life on your phone.

*The best alternative to Google Apps*

\u2022 Google Chrome

\u2014 Firefox - Safari

\u2022 Google Search

\u2014 Duckduckgo - Startpage - Neeva

\u2022 Google Chrome Passwords

\u2014 BitWarden - 1Password - KeePass

\u2022 Google Analytics

\u2014 Matomo - Fathom - Simple Analytics - GoatCounter - Counter.dev

\u2022 Google Mail

\u2014 ProtonMail - Fastmail - Zoho Mail

\u2022 Google Docs

\u2014 Beat Writer - Workflowy - Open Document Reader - Collabora

\u2022 Google sheets

\u2014 Airtable - Zoho - Coda

\u2022 YouTube

\u2014 Vimeo - PeerTube - Dailymotion - Newpipe

\u2022 Google Maps for Websites

\u2014 Leaflet - Mapbox - Nextzen

\u2022 Google Adwords

\u2014 BuySellAds

\u2022 Google Authenticator

\u2014 Authy - 1Password - AndOTP - Aegis

\u2022 Google Blogger

\u2014 WordPress - Medium - Squarespace

\u2022 Google DNS

\u2014 OpenDNS - NextDNS - Quad9

\u2022 Google Drive

\u2014 Internxt - Nextcloud - SyncThing

\u2022 Google Hangouts

\u2014 Telegram - Slack

\u2022 Google Images

\u2014 Unsplash - Pexels - Simple Gallery Pro

\u2022 Google Maps

\u2014 OpenStreetMap - Magic Earth

\u2022 Google Translate

\u2014 Deepl - WordReference - Lingva

\u2022 Google Maps

\u2014 Dark Sky - Weather Underground - OsmAnd

\u2022 Google Calendar

\u2014 Proton Calendar - Simple Calendar Pro - OpenTasks - DAVx5

\u2022 Google Keyboard

\u2014 OpenBoard - AnySoftKeyboard - Florisboard

\u2022 Google Keep

\u2014 Standard Notes - Joplin - Obsidian - Simple Notes Pro

\u2022 Google Podcast

\u2014 AntennaPod

\u2022 Ad-blocker

\u2014 Pi-hole

\u2022 Media

\u2014 Plex - Plexamp

\u2022 Netflix

\u2014 Sonar - Jellyfin

\u2022 Cloud

\u2014 NAS

\u2022 WeTransfer

\u2014 Internxt Send

These are the best alternatives that you can use if you would like to deGoogle your devices. Using Google on your device stores your location every time you turn it on. It stores your search history across all your devices in a separate database, meaning even if you were to delete said history on all your devices, Google would still have a record of it.

That\u2019s the same for anything you\u2019ve watched on YouTube, every app and extension you\u2019ve used. How often you\u2019ve used them. Where you were and who you interacted with. We would like you to understand that we want to give you back the power of protecting and controlling your data. Detaching from Google would be challenging, but to protect your data privacy, you have to be careful in using the internet and the apps that you use.

Update: We will continue to update the list with every comment and suggestions!","title":"Ask HN: How have you deGoogled your life?","updated_at":"2026-07-29T22:46:34Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"louis030195"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Hi Hacker News, I'm Louis. I built Screenpipe (https://screenpipe.com), an app that records your screen and audio locally (only!), and gives AI agents a searchable memory of what you've seen, said, and heard. This makes it easier to automate your repetitive tasks, turn them into SOPs (Standard Operating Procedure) and so on.

I made a HN-style demo video at https://www.tella.tv/video/build-your-ai-second-brain-with-s... and there\u2019s a marketing video at https://www.youtube.com/watch?v=c1jV6E9pyug.

I\u2019ve been obsessed with this for a long time. I\u2019ve been maintaining a \u201csecond brain\u201d since 2020, in which I would store journals, handwritten notes, music I listen to, projects I'm working on, conversations I have with people, personal CRM etc. I experimented a lot of RAG in the early days with ParlAI, hundreds of fine-tuned GPT2 models, and GPT3 (https://forum.obsidian.md/t/fine-tuning-openai-api-gpt3-on-y...). Later I built Ava, the first Obsidian AI plugin, which grew to a few thousands of users quickly. It then became Embedbase, an API to make it easier to build AI apps powered by RAG.

What I learned from all this is how important it is for the models to have context about what you\u2019re doing on your computer, in order to get them to do what you want.

In the early days there was fine tuning but it was too much pain, then there was tool calling so that AI can access software you use but still kinda not autonomous enough. needing micro management. Then MCP came, but it felt too static, and non technical users struggled to build and use MCP. Then we got skills. Most recently we\u2019ve seen Karpathy\u2019s LLM-maintained wiki, Garry's GBrain, etc., where an agent incrementally maintains a persistent collection of Markdown pages. New sources update entity pages, strengthen or contradict existing claims, and improve a synthesis that compounds over time. I like this pattern, but it still begins with someone selecting and importing the sources. There is still no way AI can know what you and your company are doing every day, across apps, not just inside of apps.

Of course, not everyone wants this. But I do! I want AI to know what I'm doing and never lose memory ever again, and I want it to use the same software that humans do, without painful context switches.

I started building Screenpipe for myself in 2024 - a CLI to record your screen and plug this context into AI. An HN user posted it in 2024 (https://news.ycombinator.com/item?id=41695840) and that discussion influenced the product. The most useful criticism concerned recording consent, local security, CPU usage, signal-to-noise, and whether agents could act on top of the data.

The naive implementation started from continuously recording video and running OCR over every frame. But that creates duplicate data, consumes substantial resources (it basically turns your computer into a space heater!), and discards structure the operating system already knows. Screenpipe now instead listens for events such as app switches, clicks, typing pauses, scrolling, and idle fallbacks. When something meaningful changes, it pairs a screenshot with the operating system\u2019s accessibility tree at the same timestamp. OCR is used when structured accessibility data is unavailable. We also capture audio continuously, identify speakers and transcribe locally through Parakeet/Whisper or using cloud models.

Everything is indexed in a local SQLite database, mp4 files, and sometimes md files. An AI friendly API on port 3030 is open for agents, with authentication and a MCP and skills.

Once Screenpipe has been up and running for a while, you can use it through our built-in chat, Claude, ChatGPT, Hermes, Openclaw, or any agent, to do things like:

- adding context to your current chat, e.g. "gather all context about task X", then requiring less prompts to achieve your goal

- retrieve information, e.g. "retrieve the tasks i was working on from 8 am to 4 pm, make a list of what got done and what's left"

- create and maintain a personal wiki / second brain for your agents: "every 1h organize everything i do in projects, people, tasks, meetings in my Obsidian vault as markdown files and folders"

- create automations: whenever i visit someone's profile on linkedin, update my crm

- find automation opportunities: look at everything my team has done this week and turn it into a list of automation opportunities

Screenpipe data is stored locally, though we also offer an enterprise plan to discover automation opportunities and for that the company decides where the data lives. We built our own AI PII model to redact sensitive information, it runs locally on Apple MLX or Windows DirectML, we also support cloud confidential inference for low end devices, although our local models are meant to use <1% CPU and <400 mb RAM. Users can set apps, windows, and urls to filter, in addition to browser incognito mode.

We also support recording schedules and other privacy features.

Most of our codebase is written in Rust, MLX, Onnx, we like cidre or direct C call for Apple APIs and windows-rs for Windows API. We also experimentally support Linux.

We have a desktop app (https://screenpipe.com/how-to-install) and a CLI:

  npx screenpipe record\n
\nYou can run that without creating an account. All the code is source-available at https://github.com/screenpipe/screenpipe. We took the dreaded step of making our own Screenpipe Commercial License. I know HN strongly prefers OSI open source (MIT/Apache/etc.) but couldn\u2019t find a sustainable way to keep developing Screenpipe while companies were using it commercially for free. So now personal non-commercial, nonprofit, educational, and research use is free, but commercial use requires a license.

Versions released before the license change remain available under MIT. We have a free tier, and other plans, including Enterprise which helps companies find automation opportunities.

Would love to hear any feedback, things you've done with screenpipe, or features you'd want"},"title":{"matchLevel":"none","matchedWords":[],"value":"Launch HN: Screenpipe (YC S26) \u2013 Record how you work and turn that into agents"}},"_tags":["story","author_louis030195","story_49024620","launch_hn"],"author":"louis030195","children":[49024761,49025034,49025107,49025175,49025291,49025378,49025557,49025704,49026319,49026609,49026624,49026720,49027325,49027573,49027845,49027906,49028025,49028043,49028076,49028083,49028111,49028119,49028130,49029003,49029162,49031269,49031437,49031697,49031980,49033472,49039177,49057039,49064231,49093110],"created_at":"2026-07-23T16:48:38Z","created_at_i":1784825318,"num_comments":67,"objectID":"49024620","points":88,"story_id":49024620,"story_text":"Hi Hacker News, I'm Louis. I built Screenpipe (https://screenpipe.com), an app that records your screen and audio locally (only!), and gives AI agents a searchable memory of what you've seen, said, and heard. This makes it easier to automate your repetitive tasks, turn them into SOPs (Standard Operating Procedure) and so on.

I made a HN-style demo video at https://www.tella.tv/video/build-your-ai-second-brain-with-s... and there\u2019s a marketing video at https://www.youtube.com/watch?v=c1jV6E9pyug.

I\u2019ve been obsessed with this for a long time. I\u2019ve been maintaining a \u201csecond brain\u201d since 2020, in which I would store journals, handwritten notes, music I listen to, projects I'm working on, conversations I have with people, personal CRM etc. I experimented a lot of RAG in the early days with ParlAI, hundreds of fine-tuned GPT2 models, and GPT3 (https://forum.obsidian.md/t/fine-tuning-openai-api-gpt3-on-y...). Later I built Ava, the first Obsidian AI plugin, which grew to a few thousands of users quickly. It then became Embedbase, an API to make it easier to build AI apps powered by RAG.

What I learned from all this is how important it is for the models to have context about what you\u2019re doing on your computer, in order to get them to do what you want.

In the early days there was fine tuning but it was too much pain, then there was tool calling so that AI can access software you use but still kinda not autonomous enough. needing micro management. Then MCP came, but it felt too static, and non technical users struggled to build and use MCP. Then we got skills. Most recently we\u2019ve seen Karpathy\u2019s LLM-maintained wiki, Garry's GBrain, etc., where an agent incrementally maintains a persistent collection of Markdown pages. New sources update entity pages, strengthen or contradict existing claims, and improve a synthesis that compounds over time. I like this pattern, but it still begins with someone selecting and importing the sources. There is still no way AI can know what you and your company are doing every day, across apps, not just inside of apps.

Of course, not everyone wants this. But I do! I want AI to know what I'm doing and never lose memory ever again, and I want it to use the same software that humans do, without painful context switches.

I started building Screenpipe for myself in 2024 - a CLI to record your screen and plug this context into AI. An HN user posted it in 2024 (https://news.ycombinator.com/item?id=41695840) and that discussion influenced the product. The most useful criticism concerned recording consent, local security, CPU usage, signal-to-noise, and whether agents could act on top of the data.

The naive implementation started from continuously recording video and running OCR over every frame. But that creates duplicate data, consumes substantial resources (it basically turns your computer into a space heater!), and discards structure the operating system already knows. Screenpipe now instead listens for events such as app switches, clicks, typing pauses, scrolling, and idle fallbacks. When something meaningful changes, it pairs a screenshot with the operating system\u2019s accessibility tree at the same timestamp. OCR is used when structured accessibility data is unavailable. We also capture audio continuously, identify speakers and transcribe locally through Parakeet/Whisper or using cloud models.

Everything is indexed in a local SQLite database, mp4 files, and sometimes md files. An AI friendly API on port 3030 is open for agents, with authentication and a MCP and skills.

Once Screenpipe has been up and running for a while, you can use it through our built-in chat, Claude, ChatGPT, Hermes, Openclaw, or any agent, to do things like:

- adding context to your current chat, e.g. "gather all context about task X", then requiring less prompts to achieve your goal

- retrieve information, e.g. "retrieve the tasks i was working on from 8 am to 4 pm, make a list of what got done and what's left"

- create and maintain a personal wiki / second brain for your agents: "every 1h organize everything i do in projects, people, tasks, meetings in my Obsidian vault as markdown files and folders"

- create automations: whenever i visit someone's profile on linkedin, update my crm

- find automation opportunities: look at everything my team has done this week and turn it into a list of automation opportunities

Screenpipe data is stored locally, though we also offer an enterprise plan to discover automation opportunities and for that the company decides where the data lives. We built our own AI PII model to redact sensitive information, it runs locally on Apple MLX or Windows DirectML, we also support cloud confidential inference for low end devices, although our local models are meant to use <1% CPU and <400 mb RAM. Users can set apps, windows, and urls to filter, in addition to browser incognito mode.

We also support recording schedules and other privacy features.

Most of our codebase is written in Rust, MLX, Onnx, we like cidre or direct C call for Apple APIs and windows-rs for Windows API. We also experimentally support Linux.

We have a desktop app (https://screenpipe.com/how-to-install) and a CLI:

  npx screenpipe record\n
\nYou can run that without creating an account. All the code is source-available at https://github.com/screenpipe/screenpipe. We took the dreaded step of making our own Screenpipe Commercial License. I know HN strongly prefers OSI open source (MIT/Apache/etc.) but couldn\u2019t find a sustainable way to keep developing Screenpipe while companies were using it commercially for free. So now personal non-commercial, nonprofit, educational, and research use is free, but commercial use requires a license.

Versions released before the license change remain available under MIT. We have a free tier, and other plans, including Enterprise which helps companies find automation opportunities.

Would love to hear any feedback, things you've done with screenpipe, or features you'd want","title":"Launch HN: Screenpipe (YC S26) \u2013 Record how you work and turn that into agents","updated_at":"2026-08-03T04:40:25Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"jdw64"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"I am a programmer with about seven years of experience, but I would say I am below many of the programmers here, and most of the work I do is fairly simple. I mainly work on WPF and WinForms applications that act as UI layers for ladder diagram based systems in industrial sites.

Because of the nature of this work, it is very labor intensive. There are too many factory trips, it is physically exhausting, and the pay is not great relative to the amount of effort involved. That is why I want to become more of a product oriented programmer. To move in that direction, I have been trying to use AI as actively as possible. In my current job, though, that is difficult because factory security is usually closed off and AI tools cannot really be connected there.

I have been reading about prompt engineering, harness style documentation, and similar topics. I also use OpenClaw, and honestly I feel like I am already trying almost everything I can get my hands on. I connect it with Obsidian and write down the knowledge I think my agents need while I work.

Still, the idea of ten times productivity feels somewhat exaggerated to me. I want to know how people actually get better at using AI, and how they learn the underlying methods. There is so much hype around AI that it is hard to tell what is real, and learning this stuff has been more difficult than I expected.

How should I study this properly?

Right now I especially want to learn how to manage multi agent systems. Every AI only multi agent framework I have built or tried so far has failed. At first I tried to control it in a TDD like way, but people who have used TDD seriously probably know what I mean when I say that tests can become too locally focused. Sometimes the architecture starts to fall apart, and then the agents keep fixing only those small areas over and over while the token cost keeps rising.

At the same time, in Korea there is a huge amount of talk that if you are not using AI, you will fall behind. Because of that, I have been trying hard to learn it so I do not get left behind. And to be honest, programming has become much more enjoyable for me since I started using AI.

One reason is that programming feels deeply tied to English ways of thinking, and that has always felt awkward with Korean. Even the act of writing code used to feel mentally heavy for me. But with AI, I can think through things in Korean and still code effectively.

You know that huge fatigue you feel when you first start writing code from scratch?

When I write a single interface, I immediately start seeing the number of implementations.\nWhen I see the implementations, I start seeing lifecycle conflicts.\nWhen I see lifecycle issues, I start thinking about ownership and disposal.\nWhen I think about ownership, I start thinking about pooling possibilities and reset contracts.\nWhen I think about DI, I start seeing the composition root and the test seams.\nWhen I think about the contract itself, I start worrying about future extension costs.

All of that used to make coding feel painfully heavy for me.

But AI just writes a draft without getting stuck in all of that, and I genuinely enjoy taking that draft and reshaping it around my own thinking.

I want to get much better at using AI this way.

What are the best ways to improve at it, and how do you keep up with useful trends without getting buried in the hype?"},"title":{"matchLevel":"none","matchedWords":[],"value":"Ask HN: May be a basic question, but how can I use AI well?"}},"_tags":["story","author_jdw64","story_47822787","ask_hn"],"author":"jdw64","children":[47826541,47829540,47831198,47842010,47843519,47862377,47870658],"created_at":"2026-04-19T08:42:37Z","created_at_i":1776588157,"num_comments":5,"objectID":"47822787","points":10,"story_id":47822787,"story_text":"I am a programmer with about seven years of experience, but I would say I am below many of the programmers here, and most of the work I do is fairly simple. I mainly work on WPF and WinForms applications that act as UI layers for ladder diagram based systems in industrial sites.

Because of the nature of this work, it is very labor intensive. There are too many factory trips, it is physically exhausting, and the pay is not great relative to the amount of effort involved. That is why I want to become more of a product oriented programmer. To move in that direction, I have been trying to use AI as actively as possible. In my current job, though, that is difficult because factory security is usually closed off and AI tools cannot really be connected there.

I have been reading about prompt engineering, harness style documentation, and similar topics. I also use OpenClaw, and honestly I feel like I am already trying almost everything I can get my hands on. I connect it with Obsidian and write down the knowledge I think my agents need while I work.

Still, the idea of ten times productivity feels somewhat exaggerated to me. I want to know how people actually get better at using AI, and how they learn the underlying methods. There is so much hype around AI that it is hard to tell what is real, and learning this stuff has been more difficult than I expected.

How should I study this properly?

Right now I especially want to learn how to manage multi agent systems. Every AI only multi agent framework I have built or tried so far has failed. At first I tried to control it in a TDD like way, but people who have used TDD seriously probably know what I mean when I say that tests can become too locally focused. Sometimes the architecture starts to fall apart, and then the agents keep fixing only those small areas over and over while the token cost keeps rising.

At the same time, in Korea there is a huge amount of talk that if you are not using AI, you will fall behind. Because of that, I have been trying hard to learn it so I do not get left behind. And to be honest, programming has become much more enjoyable for me since I started using AI.

One reason is that programming feels deeply tied to English ways of thinking, and that has always felt awkward with Korean. Even the act of writing code used to feel mentally heavy for me. But with AI, I can think through things in Korean and still code effectively.

You know that huge fatigue you feel when you first start writing code from scratch?

When I write a single interface, I immediately start seeing the number of implementations.\nWhen I see the implementations, I start seeing lifecycle conflicts.\nWhen I see lifecycle issues, I start thinking about ownership and disposal.\nWhen I think about ownership, I start thinking about pooling possibilities and reset contracts.\nWhen I think about DI, I start seeing the composition root and the test seams.\nWhen I think about the contract itself, I start worrying about future extension costs.

All of that used to make coding feel painfully heavy for me.

But AI just writes a draft without getting stuck in all of that, and I genuinely enjoy taking that draft and reshaping it around my own thinking.

I want to get much better at using AI this way.

What are the best ways to improve at it, and how do you keep up with useful trends without getting buried in the hype?","title":"Ask HN: May be a basic question, but how can I use AI well?","updated_at":"2026-06-03T14:37:14Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"thimm"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Hey everyone,

I'm excited to share a small project I hacked together last night: a local tool to transcribe and summarize voice memos from the iOS and MacOS Voice Memos app.

What does it do?\nIt's a lifesaver for anyone who, like me, records loads of voice memos and needs an efficient way to integrate these recordings into their note-keeping system (like Obsidian).

Why is this useful?\n- No Cloud Processing: Your voice memos are processed entirely on your device, ensuring privacy and security.\n- Integration with Note-taking Apps: Directly pull transcribed and summarized content into your preferred note-taking app.\n- Time-Saving: Automatically processes recordings without manual intervention.

Tech Stack:\n- Ollama and whisper.cpp for transcription and summarization."},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: Local Transcription and Summarization of Voice Memos for iOS and Mac"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://github.com/Thimm/transcribe_apple_voice_memos"}},"_tags":["story","author_thimm","story_38879064","show_hn"],"author":"thimm","children":[39025352],"created_at":"2024-01-05T13:57:25Z","created_at_i":1704463045,"num_comments":1,"objectID":"38879064","points":10,"story_id":38879064,"story_text":"Hey everyone,

I'm excited to share a small project I hacked together last night: a local tool to transcribe and summarize voice memos from the iOS and MacOS Voice Memos app.

What does it do?\nIt's a lifesaver for anyone who, like me, records loads of voice memos and needs an efficient way to integrate these recordings into their note-keeping system (like Obsidian).

Why is this useful?\n- No Cloud Processing: Your voice memos are processed entirely on your device, ensuring privacy and security.\n- Integration with Note-taking Apps: Directly pull transcribed and summarized content into your preferred note-taking app.\n- Time-Saving: Automatically processes recordings without manual intervention.

Tech Stack:\n- Ollama and whisper.cpp for transcription and summarization.","title":"Show HN: Local Transcription and Summarization of Voice Memos for iOS and Mac","updated_at":"2024-09-20T16:06:17Z","url":"https://github.com/Thimm/transcribe_apple_voice_memos"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"rajatarya"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"I built Markdown Viewer because every Markdown app I found was either bloated (VS Code, Obsidian) or too bare-bones. Wanted something that loads instantly, renders Obsidian-style features cleanly, and weighs in at a few megabytes.

Built with Tauri 2 (Rust backend + webview frontend):\n - GitHub Flavored Markdown + Obsidian extensions (wikilinks, callouts, emoji, math, Mermaid diagrams)\n - Frontmatter rendered as a structured metadata bar above content\n - HTML sanitization via ammonia for security\n - No heavy dependencies, no Electron

What makes it interesting isn't so much the features \u2014 but how it was built. Every line of Rust, CSS, and JavaScript was written by AI coding agents (pi.dev/Qwen and Claude Code) without a single human writing code. No hand-holding, no "prompt then copy-paste" \u2014 just a high-level brief and iterative agent-driven development.

I've been using this project to hone into my pi.dev setup - am getting somewhere with pi.dev/Qwen3.6 with a small set of extensions. Trying to avoid Claude Code/Opus for this project - want to see what I can do with local LLM.

Key stats:\n - Instant load (no webview overhead, pure rendering)\n - ~few MB binary\n - Sanitized HTML via ammonia (XSS-safe)\n - Open source on GitHub

Open source at https://github.com/rajatarya/mdviewer"},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: I built a native macOS Markdown viewer 100% with AI coding agents"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://github.com/rajatarya/mdviewer"}},"_tags":["story","author_rajatarya","story_48200226","show_hn"],"author":"rajatarya","children":[48203462],"created_at":"2026-05-19T21:57:19Z","created_at_i":1779227839,"num_comments":1,"objectID":"48200226","points":6,"story_id":48200226,"story_text":"I built Markdown Viewer because every Markdown app I found was either bloated (VS Code, Obsidian) or too bare-bones. Wanted something that loads instantly, renders Obsidian-style features cleanly, and weighs in at a few megabytes.

Built with Tauri 2 (Rust backend + webview frontend):\n - GitHub Flavored Markdown + Obsidian extensions (wikilinks, callouts, emoji, math, Mermaid diagrams)\n - Frontmatter rendered as a structured metadata bar above content\n - HTML sanitization via ammonia for security\n - No heavy dependencies, no Electron

What makes it interesting isn't so much the features \u2014 but how it was built. Every line of Rust, CSS, and JavaScript was written by AI coding agents (pi.dev/Qwen and Claude Code) without a single human writing code. No hand-holding, no "prompt then copy-paste" \u2014 just a high-level brief and iterative agent-driven development.

I've been using this project to hone into my pi.dev setup - am getting somewhere with pi.dev/Qwen3.6 with a small set of extensions. Trying to avoid Claude Code/Opus for this project - want to see what I can do with local LLM.

Key stats:\n - Instant load (no webview overhead, pure rendering)\n - ~few MB binary\n - Sanitized HTML via ammonia (XSS-safe)\n - Open source on GitHub

Open source at https://github.com/rajatarya/mdviewer","title":"Show HN: I built a native macOS Markdown viewer 100% with AI coding agents","updated_at":"2026-05-20T15:46:21Z","url":"https://github.com/rajatarya/mdviewer"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"thejarren"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Hey HN, I'm really excited to share Emra with you. The yc description would be: It's like "Notion meets Lovable". It's a workspace where you build full apps using AI and every app sits on one shared database and service layer. Generated apps are always editable, and (coming soon:) can interact with each other in the workspace.

I'm of the opinion that the cost of software will go rapidly to zero (I don't think that's too surprising to any of you), but there will always be room for effort and creativity. Emra is essentially built for the future where every person is a developer. Essentially personal software for everyone.

So far I've built notes apps with a 3d graph view to see connections, a video editing app and a canvas design tool (figma clone) with export capabilities, as well as a collection of project management tools and games. Right now the most satisfying thing is being able to fix a bug I run into in around the same amount of time that it takes to send a bug report in any traditional app.

We're using the best models to make this work at the moment. Basically anything Opus 4.6 or later, as far as I'm concerned is the baseline of what we can use to make this happen. Our agent is currently only capable of building, though that will change rapidly, and we are pretty proud that our build loop is more token efficient than using Claude Code or other harnesses.

Arguably we are in the same category as Dreamer (Meta acquired) or Wabi (raised $20m), but at the moment we're bootstrapped and working to deliver as much value to users as possible. Users will be soon be able to download their data and apps at any time (I like to think of it as extending obsidians "file over app" philosophy to file+app). In general, I think for a platform like this to exist, we want to be as value aligned with users as possible. So our focus is on providing a solid service layer that abstracts away the complexity of most modern full stack applications. Ideally, people using Emra pay for hosting or usage and we earn our spot rather than locking you in.

On the technical side, we feel good right now. We know there will be some scaling + security challenges, but honestly, our biggest hurdle at the moment is rebuilding existing applications in a way that makes them actually worth using inside of Emra, basically solving that blank page problem.

We are building apps on an SDK that we plan on open sourcing over the next month or so, and will also provide a CLI tool so people can build Emra apps inside of Claude Code or other agents (this is how we are actually building many of our app store apps). I'm also still trying to nail down the messaging. Initially I had planned on aggressively focusing on consumer, but the cost to build an app is still prohibitive, so we're going to keep testing different approaches.

We're still very early, so I'd really appreciate any honest feedback. And I'm happy to answer any questions you might have."},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: Emra \u2013 A workspace where every app you build shares one db"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://emra.app"}},"_tags":["story","author_thejarren","story_48778145","show_hn"],"author":"thejarren","children":[48778362],"created_at":"2026-07-03T18:21:41Z","created_at_i":1783102901,"num_comments":2,"objectID":"48778145","points":3,"story_id":48778145,"story_text":"Hey HN, I'm really excited to share Emra with you. The yc description would be: It's like "Notion meets Lovable". It's a workspace where you build full apps using AI and every app sits on one shared database and service layer. Generated apps are always editable, and (coming soon:) can interact with each other in the workspace.

I'm of the opinion that the cost of software will go rapidly to zero (I don't think that's too surprising to any of you), but there will always be room for effort and creativity. Emra is essentially built for the future where every person is a developer. Essentially personal software for everyone.

So far I've built notes apps with a 3d graph view to see connections, a video editing app and a canvas design tool (figma clone) with export capabilities, as well as a collection of project management tools and games. Right now the most satisfying thing is being able to fix a bug I run into in around the same amount of time that it takes to send a bug report in any traditional app.

We're using the best models to make this work at the moment. Basically anything Opus 4.6 or later, as far as I'm concerned is the baseline of what we can use to make this happen. Our agent is currently only capable of building, though that will change rapidly, and we are pretty proud that our build loop is more token efficient than using Claude Code or other harnesses.

Arguably we are in the same category as Dreamer (Meta acquired) or Wabi (raised $20m), but at the moment we're bootstrapped and working to deliver as much value to users as possible. Users will be soon be able to download their data and apps at any time (I like to think of it as extending obsidians "file over app" philosophy to file+app). In general, I think for a platform like this to exist, we want to be as value aligned with users as possible. So our focus is on providing a solid service layer that abstracts away the complexity of most modern full stack applications. Ideally, people using Emra pay for hosting or usage and we earn our spot rather than locking you in.

On the technical side, we feel good right now. We know there will be some scaling + security challenges, but honestly, our biggest hurdle at the moment is rebuilding existing applications in a way that makes them actually worth using inside of Emra, basically solving that blank page problem.

We are building apps on an SDK that we plan on open sourcing over the next month or so, and will also provide a CLI tool so people can build Emra apps inside of Claude Code or other agents (this is how we are actually building many of our app store apps). I'm also still trying to nail down the messaging. Initially I had planned on aggressively focusing on consumer, but the cost to build an app is still prohibitive, so we're going to keep testing different approaches.

We're still very early, so I'd really appreciate any honest feedback. And I'm happy to answer any questions you might have.","title":"Show HN: Emra \u2013 A workspace where every app you build shares one db","updated_at":"2026-07-03T20:26:08Z","url":"https://emra.app"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"jmatan"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Another update on Attention: after launching here last week, over 100 people used Attention!

We followed up on feedback and we added a Notion Calendar-style calendar!

---

We realized pretty quickly when working in Attention (Superhuman for iMessage) that a lot of our conversations were about scheduling things.

When we talk to Righthand users, iMessage is a lot of "can we find time to debug the issue live" or "I'll get back to you by this evening with the answer". Personally it's a lot of booking travel and dinners.

Since we've been spending so much time in Attention, we decided to add a calendar to fix the issue. It looks like Notion Calendar, but it also supports a few new features like "fuzzy events".

The onboarding is more involved and so we'll do 1:1s for a bit (comment below if you want to be in the cohort), but we would love any and all feedback!

As before:

- Privacy / Security: Your data is yours, fully local in LanceDB + SQLite, never leaving your machine unless you turn on the AI agent, at which point data just goes to whichever AI company you chose. We don't even have servers setup for the mirrors of our eventual cloud product yet (see below).

- Free vs. Paid: Attention will always be free to run locally on your Mac with your own AI API key. If folks like the current app, we plan to add full support for other integrations (Gmail, Outlook, LinkedIn, Slack), an iPhone app, a wiki (like an Obsidian brain / PromptQL wiki) and other teams-specific features.

- Existing Features: iMessage client + Calendar client. One-click MCP for iMessage. BYO Google integration.

you can download it at attention (dot) righthand (dot) ai"},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: We Added Notion Calendar to *Superhuman for iMessage"}},"_tags":["story","author_jmatan","story_49378903","show_hn"],"author":"jmatan","created_at":"2026-08-20T19:17:44Z","created_at_i":1787253464,"num_comments":0,"objectID":"49378903","points":3,"story_id":49378903,"story_text":"Another update on Attention: after launching here last week, over 100 people used Attention!

We followed up on feedback and we added a Notion Calendar-style calendar!

---

We realized pretty quickly when working in Attention (Superhuman for iMessage) that a lot of our conversations were about scheduling things.

When we talk to Righthand users, iMessage is a lot of "can we find time to debug the issue live" or "I'll get back to you by this evening with the answer". Personally it's a lot of booking travel and dinners.

Since we've been spending so much time in Attention, we decided to add a calendar to fix the issue. It looks like Notion Calendar, but it also supports a few new features like "fuzzy events".

The onboarding is more involved and so we'll do 1:1s for a bit (comment below if you want to be in the cohort), but we would love any and all feedback!

As before:

- Privacy / Security: Your data is yours, fully local in LanceDB + SQLite, never leaving your machine unless you turn on the AI agent, at which point data just goes to whichever AI company you chose. We don't even have servers setup for the mirrors of our eventual cloud product yet (see below).

- Free vs. Paid: Attention will always be free to run locally on your Mac with your own AI API key. If folks like the current app, we plan to add full support for other integrations (Gmail, Outlook, LinkedIn, Slack), an iPhone app, a wiki (like an Obsidian brain / PromptQL wiki) and other teams-specific features.

- Existing Features: iMessage client + Calendar client. One-click MCP for iMessage. BYO Google integration.

you can download it at attention (dot) righthand (dot) ai","title":"Show HN: We Added Notion Calendar to *Superhuman for iMessage","updated_at":"2026-08-20T19:58:15Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"purple-leafy"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Hey HN.

I'm an early-career developer. I'm looking for free, or paid products, that can improve my life in some way based on context - they don't have to just be digital!

I currently pay for the following products:

- Proton Mail (Unlimited): Email, Passwords, VPN, Storage, Calendar ... replaces Google suite.

- Kagi (Unlimited): Search Engine, replaces Google Search.

- GitHub Copilot (Solo): Okay for coding.

- Anthropic Claude (AI/LLM): Just to bounce ideas around and help me with UI design mockups.

- Chrome developer account ($5): So I can make Chrome extensions.

- Spotify (music): Its okay, doesn't have some stuff I want (Roky Erickson etc - seriously check out "Roky Erickson - The Evil One (Album)" on YouTube if you haven't before, and enjoy Old Rock)

- Steam (games): Fallout 4 etc.

.....

CONTEXT

_______

I'm quite private, but not reclusive, I don't have social media or read the news, I own a "dumb" flip-phone, I basically only use this site for my world and tech news. Hence Proton Mail, Kagi, and staying off socials? I like privacy and security tools, and information management tools. Should I try Obsidian???

I'm roughly 3 years into a dev career (young-ish). Mostly doing frontend with the usual suspects (React, TypeScript), but trying to break into C#/.NET commercially. I've been exploring C in my spare time, and want to try low-level Graphics Programming (C or C++). I like paying for technical courses and books, papers etc (though free is even better)."},"title":{"matchLevel":"none","matchedWords":[],"value":"Ask HN: Recommend subs/products for hacker/developer? (Proton Mail, Kagi etc.)"}},"_tags":["story","author_purple-leafy","story_42346913","ask_hn"],"author":"purple-leafy","children":[42346941,42355093,42367777,42384445],"created_at":"2024-12-07T03:05:22Z","created_at_i":1733540722,"num_comments":4,"objectID":"42346913","points":2,"story_id":42346913,"story_text":"Hey HN.

I'm an early-career developer. I'm looking for free, or paid products, that can improve my life in some way based on context - they don't have to just be digital!

I currently pay for the following products:

- Proton Mail (Unlimited): Email, Passwords, VPN, Storage, Calendar ... replaces Google suite.

- Kagi (Unlimited): Search Engine, replaces Google Search.

- GitHub Copilot (Solo): Okay for coding.

- Anthropic Claude (AI/LLM): Just to bounce ideas around and help me with UI design mockups.

- Chrome developer account ($5): So I can make Chrome extensions.

- Spotify (music): Its okay, doesn't have some stuff I want (Roky Erickson etc - seriously check out "Roky Erickson - The Evil One (Album)" on YouTube if you haven't before, and enjoy Old Rock)

- Steam (games): Fallout 4 etc.

.....

CONTEXT

_______

I'm quite private, but not reclusive, I don't have social media or read the news, I own a "dumb" flip-phone, I basically only use this site for my world and tech news. Hence Proton Mail, Kagi, and staying off socials? I like privacy and security tools, and information management tools. Should I try Obsidian???

I'm roughly 3 years into a dev career (young-ish). Mostly doing frontend with the usual suspects (React, TypeScript), but trying to break into C#/.NET commercially. I've been exploring C in my spare time, and want to try low-level Graphics Programming (C or C++). I like paying for technical courses and books, papers etc (though free is even better).","title":"Ask HN: Recommend subs/products for hacker/developer? (Proton Mail, Kagi etc.)","updated_at":"2025-02-26T20:35:40Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"tester457"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"I keep a journal with Obsidian.md, it's a folder of [[linked]] markdown files.

I'm considering self-hosting a git server such as such as github.com/charmbracelet/soft-serve for it, but I'm not sure if it's a good idea.

I'm wondering what the security risks are of self-hosting a Git server for this, and if it's more risky to use something like a private GitHub repo instead.

If I do decide to self-host, I'm planning to use an old laptop and only whitelist my IP addresses.

Thanks in advance for any insights!

Update: main goals are syncing the journal between devices, and privacy. Unsure on trusting github for privacy."},"title":{"matchLevel":"none","matchedWords":[],"value":"Ask HN: Personal Journaling with Text Files: Self-Host Git or Use GitHub?"}},"_tags":["story","author_tester457","story_35432893","ask_hn"],"author":"tester457","children":[35432962,35433815],"created_at":"2023-04-03T23:30:31Z","created_at_i":1680564631,"num_comments":4,"objectID":"35432893","points":2,"story_id":35432893,"story_text":"I keep a journal with Obsidian.md, it's a folder of [[linked]] markdown files.

I'm considering self-hosting a git server such as such as github.com/charmbracelet/soft-serve for it, but I'm not sure if it's a good idea.

I'm wondering what the security risks are of self-hosting a Git server for this, and if it's more risky to use something like a private GitHub repo instead.

If I do decide to self-host, I'm planning to use an old laptop and only whitelist my IP addresses.

Thanks in advance for any insights!

Update: main goals are syncing the journal between devices, and privacy. Unsure on trusting github for privacy.","title":"Ask HN: Personal Journaling with Text Files: Self-Host Git or Use GitHub?","updated_at":"2024-09-20T13:46:41Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"pandrre"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Hello, HN!

This is a small app I've built to satisfy three pains/wishes I've had for a while and I think there might be people out there who can benefit from it as well.

1. I want to pop up a new tab, start writing my thoughts and, maybe, share them over the internet. As fast as I can and with as little friction possible. tldraw totally does this for drawing stuff in a whiteboard but for text, Obsidian is a local tool that requires installing and Notion is too involved. I want a simple link that just works the moment you navigate to the page.

2. Sometimes I wanted to share code or other text artifacts with customers over Discord, but the platform caps messages to a certain length before it forces you to submit a .txt. Pastebin kinda fills this gap but it's an old site and it doesn't handle BIG pastes very well also it doesn't double as your own document vault (plus I don't care about all their "public pastes" thing).

3. This is a recent one. Now, due to AI tools, everyone is sharing Markdown and HTML files around, even people that have no idea what Markdown and HTML is. We end up with a bunch of static files thrown around, no versioning, no security, etc. I'm not the best file organizer: I want shareable links and a compact history of all the artifacts people share with me and all of them on their latest version. Also, it instantly renders it!

From this, Pastehex was born. It might seem a weird Notion/Pastebin/tldraw amalgam but to me it fills a gap no tool ever had. It kinda feels like Notes empowered just enough for an age of constantly generating and sharing info.

I hope you like it as much as I do! It was built to be very fast and safe, it stores everything local unless you manually publish. I also have a long list of pains that I'll keep fixing with new features, stay tuned for:

- Vim mode.\n- Accounts.\n- Table view for CSVs, Parquets, SQLite, DuckDB files.\n- Organizations."},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: I've built tldraw for HTML and Markdown pages (with encryption)"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://pastehex.dev/"}},"_tags":["story","author_pandrre","story_48935058","show_hn"],"author":"pandrre","created_at":"2026-07-16T14:26:13Z","created_at_i":1784211973,"num_comments":0,"objectID":"48935058","points":2,"story_id":48935058,"story_text":"Hello, HN!

This is a small app I've built to satisfy three pains/wishes I've had for a while and I think there might be people out there who can benefit from it as well.

1. I want to pop up a new tab, start writing my thoughts and, maybe, share them over the internet. As fast as I can and with as little friction possible. tldraw totally does this for drawing stuff in a whiteboard but for text, Obsidian is a local tool that requires installing and Notion is too involved. I want a simple link that just works the moment you navigate to the page.

2. Sometimes I wanted to share code or other text artifacts with customers over Discord, but the platform caps messages to a certain length before it forces you to submit a .txt. Pastebin kinda fills this gap but it's an old site and it doesn't handle BIG pastes very well also it doesn't double as your own document vault (plus I don't care about all their "public pastes" thing).

3. This is a recent one. Now, due to AI tools, everyone is sharing Markdown and HTML files around, even people that have no idea what Markdown and HTML is. We end up with a bunch of static files thrown around, no versioning, no security, etc. I'm not the best file organizer: I want shareable links and a compact history of all the artifacts people share with me and all of them on their latest version. Also, it instantly renders it!

From this, Pastehex was born. It might seem a weird Notion/Pastebin/tldraw amalgam but to me it fills a gap no tool ever had. It kinda feels like Notes empowered just enough for an age of constantly generating and sharing info.

I hope you like it as much as I do! It was built to be very fast and safe, it stores everything local unless you manually publish. I also have a long list of pains that I'll keep fixing with new features, stay tuned for:

- Vim mode.\n- Accounts.\n- Table view for CSVs, Parquets, SQLite, DuckDB files.\n- Organizations.","title":"Show HN: I've built tldraw for HTML and Markdown pages (with encryption)","updated_at":"2026-07-16T16:57:30Z","url":"https://pastehex.dev/"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"nahsuhn"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"I built a collection of MCP servers that let Claude access your tools without sending data through third-party services.

  Install: npx mcp-servers-cli init\n\n  7 servers: Linear, Postgres, Notion, Obsidian, SQLite, GitHub, Filesystem\n\n  - Everything runs locally on your machine\n  - One command setup (detects your tools, auto-configures Claude)\n  - Read-only by default for databases\n  - SQL injection protection, path traversal prevention\n  - Rate limiting on API servers (configurable)\n  - 80 tests, MIT licensed\n\n  Happy to answer questions about the security model or MCP implementation.
"},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: Privacy-First MCP Servers for Claude \u2013 Linear, Postgres, Notion, GitHub"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://github.com/joshduffy/mcp-servers"}},"_tags":["story","author_nahsuhn","story_46491772","show_hn"],"author":"nahsuhn","created_at":"2026-01-04T20:19:36Z","created_at_i":1767557976,"num_comments":0,"objectID":"46491772","points":2,"story_id":46491772,"story_text":"I built a collection of MCP servers that let Claude access your tools without sending data through third-party services.

  Install: npx mcp-servers-cli init\n\n  7 servers: Linear, Postgres, Notion, Obsidian, SQLite, GitHub, Filesystem\n\n  - Everything runs locally on your machine\n  - One command setup (detects your tools, auto-configures Claude)\n  - Read-only by default for databases\n  - SQL injection protection, path traversal prevention\n  - Rate limiting on API servers (configurable)\n  - 80 tests, MIT licensed\n\n  Happy to answer questions about the security model or MCP implementation.
","title":"Show HN: Privacy-First MCP Servers for Claude \u2013 Linear, Postgres, Notion, GitHub","updated_at":"2026-03-05T23:19:29Z","url":"https://github.com/joshduffy/mcp-servers"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"huedaya"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"I tried to build markdown based notepad (similar like Obsidian) but stores all files on S3/R2.

Vanilla PHP, no dependency.\n Web based\n No vendor locking (S3), high portability.

---

"why not just using Notion or Obsidian?"

- Notion is great but they keep adding features that too overkill, also I don't think its easy to move to other vendor.

- Obsidian is cool, but data saved locally is a security risk (eg. laptop stolen).

- Drive/Dropbox is great, but they can't do hyper-linking like Obsidian does.

So, I tried to solve my own problem to just save all markdown + image on S3/R2 (which super cheap and universal).

What do you think guys?"},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: Note Cargo, a Markdown text editor saved all data on S3/R2 (no DB)"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://twitter.com/huedaya/status/1933915726768955396"}},"_tags":["story","author_huedaya","story_44277255","show_hn"],"author":"huedaya","created_at":"2025-06-14T16:24:48Z","created_at_i":1749918288,"num_comments":0,"objectID":"44277255","points":2,"story_id":44277255,"story_text":"I tried to build markdown based notepad (similar like Obsidian) but stores all files on S3/R2.

Vanilla PHP, no dependency.\n Web based\n No vendor locking (S3), high portability.

---

"why not just using Notion or Obsidian?"

- Notion is great but they keep adding features that too overkill, also I don't think its easy to move to other vendor.

- Obsidian is cool, but data saved locally is a security risk (eg. laptop stolen).

- Drive/Dropbox is great, but they can't do hyper-linking like Obsidian does.

So, I tried to solve my own problem to just save all markdown + image on S3/R2 (which super cheap and universal).

What do you think guys?","title":"Show HN: Note Cargo, a Markdown text editor saved all data on S3/R2 (no DB)","updated_at":"2025-06-14T23:37:28Z","url":"https://twitter.com/huedaya/status/1933915726768955396"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"antfie"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"A couple years ago, in response to my frustrations with a popular note-taking solution, I set about to find a privacy-focussed solution my family could use. One that would just work reliably, without loosing or corrupting data, and one which has a focus on privacy and security whilst being easy to use. I couldn\u2019t find anything so I set about to build a fun app for a non-techie-first audience.

Nb. I have recently discovered the power combo of Obsidian, Syncthing and Borg backup to be a great fit for my needs, however my heart and passion is still very much rooted in this app..

So today I present to you StickerDocs. I hope it\u2019s quite self-explanatory?

You put stickers on docs (files, whatever) and with those stickers you can organise and/or share things. Whatever is labelled with a sticker is securely shared and synced with whomever you decide.

The core of the solution is open source but the app is not. It\u2019s built using Flutter and is available on most popular platforms and app stores. The encryption is achieved using libsodium. Data is stored, synchronised and shared using end-to-end encryption. Synchronisation is achieved using CRDTs.

The solution is a paid-for subscription because it\u2019s cloud storage and because this is a commercial venture. The app is freemium so people can try it before taking out a subscription.

I have big plans for the future of this app, such as on-device OCR to name just one. What I present today is just the start, so whilst it may (intentionally) look quite basic now, I hope in future it retains this simplicity whilst providing more features.

Thanks,\nAnthony, creator of StickerDocs"},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: StickerDocs \u2013 Organise and Share Files Securely Using Stickers"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://stickerdocs.com"}},"_tags":["story","author_antfie","story_41468019","show_hn"],"author":"antfie","children":[41469692],"created_at":"2024-09-06T17:25:45Z","created_at_i":1725643545,"num_comments":1,"objectID":"41468019","points":1,"story_id":41468019,"story_text":"A couple years ago, in response to my frustrations with a popular note-taking solution, I set about to find a privacy-focussed solution my family could use. One that would just work reliably, without loosing or corrupting data, and one which has a focus on privacy and security whilst being easy to use. I couldn\u2019t find anything so I set about to build a fun app for a non-techie-first audience.

Nb. I have recently discovered the power combo of Obsidian, Syncthing and Borg backup to be a great fit for my needs, however my heart and passion is still very much rooted in this app..

So today I present to you StickerDocs. I hope it\u2019s quite self-explanatory?

You put stickers on docs (files, whatever) and with those stickers you can organise and/or share things. Whatever is labelled with a sticker is securely shared and synced with whomever you decide.

The core of the solution is open source but the app is not. It\u2019s built using Flutter and is available on most popular platforms and app stores. The encryption is achieved using libsodium. Data is stored, synchronised and shared using end-to-end encryption. Synchronisation is achieved using CRDTs.

The solution is a paid-for subscription because it\u2019s cloud storage and because this is a commercial venture. The app is freemium so people can try it before taking out a subscription.

I have big plans for the future of this app, such as on-device OCR to name just one. What I present today is just the start, so whilst it may (intentionally) look quite basic now, I hope in future it retains this simplicity whilst providing more features.

Thanks,\nAnthony, creator of StickerDocs","title":"Show HN: StickerDocs \u2013 Organise and Share Files Securely Using Stickers","updated_at":"2024-09-20T17:47:16Z","url":"https://stickerdocs.com"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"midaef"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Hi HN, I\u2019m Daniel.

I built Trust Vault.\nIt\u2019s a desktop open source app for protecting sensitive files using passwords, 256-bit master tokens, Shamir\u2019s Secret Sharing, and HMAC integrity verification. We also built an Obsidian plugin.

I\u2019d appreciate feedback on the security model, UX, and potential use cases."},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: Trust Vault \u2013 encrypted file vaults with flexible key management"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://github.com/namelesscorp/tvault"}},"_tags":["story","author_midaef","story_48976859","show_hn"],"author":"midaef","created_at":"2026-07-20T10:32:00Z","created_at_i":1784543520,"num_comments":0,"objectID":"48976859","points":1,"story_id":48976859,"story_text":"Hi HN, I\u2019m Daniel.

I built Trust Vault.\nIt\u2019s a desktop open source app for protecting sensitive files using passwords, 256-bit master tokens, Shamir\u2019s Secret Sharing, and HMAC integrity verification. We also built an Obsidian plugin.

I\u2019d appreciate feedback on the security model, UX, and potential use cases.","title":"Show HN: Trust Vault \u2013 encrypted file vaults with flexible key management","updated_at":"2026-07-20T10:32:37Z","url":"https://github.com/namelesscorp/tvault"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"jakemattison"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"So I get from a security perspective this is a terrible idea, but it works great!

I wanted to give every tool I had access to LLM wiki and didn\u2019t want to pay Mem0 or congee $100 a month for saving text files.

Every AI I use hits the same wall. The conversation ends and everything disappears. Context, files, databases, working state. Next session I\u2019m re-explaining what we built yesterday.

I fixed this by giving every AI tool access to a persistent workspace on a Linux box. Claude, Claude Code, any MCP-compatible tool. They all share the same filesystem, the same database, the same knowledge base. One of them writes an architecture doc, the others can read it.

The whole thing cost an afternoon to build and $10/month to run.

I realized Pi has everything I needed. If you just rip the LLM out of Pi you can teleport any AI in the world into the harness. Pi, Mario Zechner\u2019s open source harness publishes its execution layer as an npm package. File reads, writes, grep, find, directory listing. All exposed as factory functions.\nI imported Pi\u2019s tools, registered them as MCP tools, and added a bash shell:

import {\n createReadToolDefinition,\n createWriteToolDefinition,\n createGrepToolDefinition,\n createFindToolDefinition,\n createLsToolDefinition,\n} from "@earendil-works/pi-coding-agent";

Five imports. One extra tool for shell access. The bridge is a single TypeScript file with five dependencies: Pi\u2019s package, the MCP SDK, Express, an OTP library, and Zod.

A Cloudflare Worker hosts the MCP endpoint. A Cloudflare Tunnel connects it to a cheap VPS. No inbound ports, no public IP. Free tier for both. The AI connects with three strings: URL, OAuth client ID, OAuth secret.

Auth\nClerk OAuth at the MCP connection. A shared-secret origin proxy so only my Worker reaches the bridge. A TOTP gateway that locks every tool until I enter an authenticator code. To pass the TOTP I just tell Claude the code on my authenticator app and he calls the TOTP tool in the MCP. All of this runs on a disposable VPS. But no reason you can\u2019t use this pattern to give Claude Code SSH access to dozens of machines. Every tool call is logged with SHA256 hashes. Every file write creates a backup.

I talk to Claude on my phone. We design a system architecture. Claude writes the doc to its persistent filesystem as markdown with YAML frontmatter. I open Obsidian on my laptop and the notes are there with graph view and backlinks. I open Claude Code and it can grep for the same docs Claude wrote.\nIf Claude needs another tool, it just installs it on the box. \nClaude installed PostgreSQL in userspace on the box. It runs SQL queries alongside the markdown layer. Next conversation, any device, any tool, it greps for prior context and picks up where we left off. Ideas compound instead of evaporating.\nWhy one box, many tools\nEvery AI tool connects to the same endpoint. The knowledge base is shared. Claude writes something, Claude Code can read it. The box is every tool\u2019s long-term memory. Each tool that touches it makes the shared context richer.\nOne Clerk OAuth app, one TOTP code, one workspace. Any MCP-compatible tool connects with three strings.

Any coding agent that publishes its execution layer as importable modules works for this. Pi happens to be modular enough that the surgery is trivial. Credit to Mario and the Pi team for building tools clean enough that someone could repurpose their agent\u2019s internals in an afternoon.\nStop building MCP servers from scratch. A coding agent already built the hard part.

Cybersecurity consultant and identity architect. I build AI agent infrastructure because the tools I want don\u2019t exist yet."},"title":{"matchLevel":"none","matchedWords":[],"value":"Give every tool LLM wiki and bypass Claude Code SSH Throttle"}},"_tags":["story","author_jakemattison","story_48169701","ask_hn"],"author":"jakemattison","children":[48214169],"created_at":"2026-05-17T15:18:17Z","created_at_i":1779031097,"num_comments":0,"objectID":"48169701","points":1,"story_id":48169701,"story_text":"So I get from a security perspective this is a terrible idea, but it works great!

I wanted to give every tool I had access to LLM wiki and didn\u2019t want to pay Mem0 or congee $100 a month for saving text files.

Every AI I use hits the same wall. The conversation ends and everything disappears. Context, files, databases, working state. Next session I\u2019m re-explaining what we built yesterday.

I fixed this by giving every AI tool access to a persistent workspace on a Linux box. Claude, Claude Code, any MCP-compatible tool. They all share the same filesystem, the same database, the same knowledge base. One of them writes an architecture doc, the others can read it.

The whole thing cost an afternoon to build and $10/month to run.

I realized Pi has everything I needed. If you just rip the LLM out of Pi you can teleport any AI in the world into the harness. Pi, Mario Zechner\u2019s open source harness publishes its execution layer as an npm package. File reads, writes, grep, find, directory listing. All exposed as factory functions.\nI imported Pi\u2019s tools, registered them as MCP tools, and added a bash shell:

import {\n createReadToolDefinition,\n createWriteToolDefinition,\n createGrepToolDefinition,\n createFindToolDefinition,\n createLsToolDefinition,\n} from "@earendil-works/pi-coding-agent";

Five imports. One extra tool for shell access. The bridge is a single TypeScript file with five dependencies: Pi\u2019s package, the MCP SDK, Express, an OTP library, and Zod.

A Cloudflare Worker hosts the MCP endpoint. A Cloudflare Tunnel connects it to a cheap VPS. No inbound ports, no public IP. Free tier for both. The AI connects with three strings: URL, OAuth client ID, OAuth secret.

Auth\nClerk OAuth at the MCP connection. A shared-secret origin proxy so only my Worker reaches the bridge. A TOTP gateway that locks every tool until I enter an authenticator code. To pass the TOTP I just tell Claude the code on my authenticator app and he calls the TOTP tool in the MCP. All of this runs on a disposable VPS. But no reason you can\u2019t use this pattern to give Claude Code SSH access to dozens of machines. Every tool call is logged with SHA256 hashes. Every file write creates a backup.

I talk to Claude on my phone. We design a system architecture. Claude writes the doc to its persistent filesystem as markdown with YAML frontmatter. I open Obsidian on my laptop and the notes are there with graph view and backlinks. I open Claude Code and it can grep for the same docs Claude wrote.\nIf Claude needs another tool, it just installs it on the box. \nClaude installed PostgreSQL in userspace on the box. It runs SQL queries alongside the markdown layer. Next conversation, any device, any tool, it greps for prior context and picks up where we left off. Ideas compound instead of evaporating.\nWhy one box, many tools\nEvery AI tool connects to the same endpoint. The knowledge base is shared. Claude writes something, Claude Code can read it. The box is every tool\u2019s long-term memory. Each tool that touches it makes the shared context richer.\nOne Clerk OAuth app, one TOTP code, one workspace. Any MCP-compatible tool connects with three strings.

Any coding agent that publishes its execution layer as importable modules works for this. Pi happens to be modular enough that the surgery is trivial. Credit to Mario and the Pi team for building tools clean enough that someone could repurpose their agent\u2019s internals in an afternoon.\nStop building MCP servers from scratch. A coding agent already built the hard part.

Cybersecurity consultant and identity architect. I build AI agent infrastructure because the tools I want don\u2019t exist yet.","title":"Give every tool LLM wiki and bypass Claude Code SSH Throttle","updated_at":"2026-05-21T08:33:22Z"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"easyFloyd"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"Hi HN,

I built FadNote because I realized that while services like Privnote or Yopass exist, they often feel like an "interruption" to a developer's flow. You have to leave your terminal, open a browser, paste, and copy again.

FadNote is designed for integration, not just web-visiting.\nThe goal is to provide a zero-knowledge "utility layer" that lives where you already work:

OpenClaw Skill: For AI-powered workflow automation.

CLI First: A zero-dependency Node.js script to pipe secrets directly from your terminal (echo "secret" | fadnote).

Obsidian Plugin (In Dev): To share snippets directly from your knowledge base.

The Security Model (Trust-less):

Local Encryption: Secrets are encrypted via AES-256-GCM with 600,000 PBKDF2 iterations before they leave your machine.

The URL Fragment: The decryption key is stored in the URL fragment (#key). Since browsers never send fragments to the server, I literally cannot read your data even if I wanted to.

One-Time & Faded: The encrypted blob is deleted from the server immediately after the first read or after the TTL expires.

Why I\u2019m posting here:\nI\u2019ve integrated this into OpenClaw and am finishing the Obsidian plugin. However, I\u2019m looking for feedback on where this "fading note" utility belongs next.

The real question for you:\nAside from IDEs (VS Code) or CI/CD pipelines, where else should I integrate this to make sharing temporary secrets frictionless in a professional workflow?

GitHub: https://github.com/easyFloyd/fadnote

Live Instance: https://fadnote.com

I\u2019m eager to hear your thoughts on both the crypto implementation and the next integration targets!"},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: FadNote \u2013 Zero-knowledge secret sharing for your CLI and AI workflows"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://github.com/easyFloyd/fadnote"}},"_tags":["story","author_easyFloyd","story_47253272","show_hn"],"author":"easyFloyd","created_at":"2026-03-04T20:23:25Z","created_at_i":1772655805,"num_comments":0,"objectID":"47253272","points":1,"story_id":47253272,"story_text":"Hi HN,

I built FadNote because I realized that while services like Privnote or Yopass exist, they often feel like an "interruption" to a developer's flow. You have to leave your terminal, open a browser, paste, and copy again.

FadNote is designed for integration, not just web-visiting.\nThe goal is to provide a zero-knowledge "utility layer" that lives where you already work:

OpenClaw Skill: For AI-powered workflow automation.

CLI First: A zero-dependency Node.js script to pipe secrets directly from your terminal (echo "secret" | fadnote).

Obsidian Plugin (In Dev): To share snippets directly from your knowledge base.

The Security Model (Trust-less):

Local Encryption: Secrets are encrypted via AES-256-GCM with 600,000 PBKDF2 iterations before they leave your machine.

The URL Fragment: The decryption key is stored in the URL fragment (#key). Since browsers never send fragments to the server, I literally cannot read your data even if I wanted to.

One-Time & Faded: The encrypted blob is deleted from the server immediately after the first read or after the TTL expires.

Why I\u2019m posting here:\nI\u2019ve integrated this into OpenClaw and am finishing the Obsidian plugin. However, I\u2019m looking for feedback on where this "fading note" utility belongs next.

The real question for you:\nAside from IDEs (VS Code) or CI/CD pipelines, where else should I integrate this to make sharing temporary secrets frictionless in a professional workflow?

GitHub: https://github.com/easyFloyd/fadnote

Live Instance: https://fadnote.com

I\u2019m eager to hear your thoughts on both the crypto implementation and the next integration targets!","title":"Show HN: FadNote \u2013 Zero-knowledge secret sharing for your CLI and AI workflows","updated_at":"2026-03-05T23:41:43Z","url":"https://github.com/easyFloyd/fadnote"},{"_highlightResult":{"author":{"matchLevel":"none","matchedWords":[],"value":"BroTechLead"},"story_text":{"fullyHighlighted":false,"matchLevel":"full","matchedWords":["obsidian","security"],"value":"I\u2019m sharing an MVP of a tool for building documentation sites directly from Git repositories: https://brodocs.io with auto conversion of PlantUML and draw.io diagrams.

All repos appear on left tree menu, but you can also create sites with top menu structure where each menu item directs to subsite with own left menu structure. Examples: https://brodocs.io/94c8be738065bd0c559/Backlog/Intakebacklog..., https://brodocs.io/21a3986b137fb8f4ff8/Backlog/README.html,

Who may like it:

Large organizations to build central and per team documentation sites from micro (and nano) services docs, Terraform/Ansible modules, solution designs, architecture decision records. Keeping docs as markdown in git allows collaboration through standard PR workflows. Could be an input to construct agents.md or copilot-instructions.md in given area, describing architecture at high level, to get better vibe codes. I see quite often that teams build own sites using some static site generator and CI/CD pipelines, moving away from wiki like Confluence, but it costs some effort to build/maintain and security is missing.

Small distributed teams working on startups to have common docs space built from markdown files stored close to source code. When hiring starts, new people need to be on boarded quickly.

Individuals who use PKM (Personal Knowledge Management) tools based on markdown, such as VS Code, NeoVim, Obsidian, or Logseq. If you have spent some time to build PKM, you might be using it in read-only mode for some stable parts, so e.g. in restrictive corporate environments where your favorite PKM tool might not be allowed, or don't want to have too many VSC windows open, quick access from a browser could be helpful.

The MVP does not require signing up. Login and management app will come next.

Happy to hear observations, criticism, and suggestions. How do you prefer to write tech docs at your work, wiki or markdowns in git repo? Do you publish them using some static site generators?"},"title":{"matchLevel":"none","matchedWords":[],"value":"Show HN: Generate documentation sites from Git repositories"},"url":{"matchLevel":"none","matchedWords":[],"value":"https://brodocs.io/d248c24a335845277b6/docs/README.html"}},"_tags":["story","author_BroTechLead","story_46058327","show_hn"],"author":"BroTechLead","created_at":"2025-11-26T15:29:01Z","created_at_i":1764170941,"num_comments":0,"objectID":"46058327","points":1,"story_id":46058327,"story_text":"I\u2019m sharing an MVP of a tool for building documentation sites directly from Git repositories: https://brodocs.io with auto conversion of PlantUML and draw.io diagrams.

All repos appear on left tree menu, but you can also create sites with top menu structure where each menu item directs to subsite with own left menu structure. Examples: https://brodocs.io/94c8be738065bd0c559/Backlog/Intakebacklog..., https://brodocs.io/21a3986b137fb8f4ff8/Backlog/README.html,

Who may like it:

Large organizations to build central and per team documentation sites from micro (and nano) services docs, Terraform/Ansible modules, solution designs, architecture decision records. Keeping docs as markdown in git allows collaboration through standard PR workflows. Could be an input to construct agents.md or copilot-instructions.md in given area, describing architecture at high level, to get better vibe codes. I see quite often that teams build own sites using some static site generator and CI/CD pipelines, moving away from wiki like Confluence, but it costs some effort to build/maintain and security is missing.

Small distributed teams working on startups to have common docs space built from markdown files stored close to source code. When hiring starts, new people need to be on boarded quickly.

Individuals who use PKM (Personal Knowledge Management) tools based on markdown, such as VS Code, NeoVim, Obsidian, or Logseq. If you have spent some time to build PKM, you might be using it in read-only mode for some stable parts, so e.g. in restrictive corporate environments where your favorite PKM tool might not be allowed, or don't want to have too many VSC windows open, quick access from a browser could be helpful.

The MVP does not require signing up. Login and management app will come next.

Happy to hear observations, criticism, and suggestions. How do you prefer to write tech docs at your work, wiki or markdowns in git repo? Do you publish them using some static site generators?","title":"Show HN: Generate documentation sites from Git repositories","updated_at":"2026-03-05T23:08:11Z","url":"https://brodocs.io/d248c24a335845277b6/docs/README.html"}],"hitsPerPage":50,"nbHits":24,"nbPages":1,"page":0,"params":"query=Obsidian+Security&tags=story&hitsPerPage=50&advancedSyntax=true&analyticsTags=backend","processingTimeMS":40,"processingTimingsMS":{"_request":{"roundTrip":18},"afterFetch":{"format":{"highlighting":5,"total":5}},"fetch":{"query":32,"scanning":5,"total":38},"getCache":1,"total":40},"query":"Obsidian Security","serverTimeMS":47}