I highly recommend cloudflare's security audit skill: https://github.com/cloudflare/security-audit-skill

Run it on all your software. Run it with the free models. Use it even if you used a model to audit something - it will find much more things. Works in all agent harnesses and is model independent.

The age of personal apps is fully here. @urza made his own text editor.

https://github.com/urza/editor

If you don't like them, do not use their money. If you don't use their money, do not use their rails to get your money. It's very simple. What are you afraid of?

Another app that I like is Tally by @Tally

It is an Android app that is fully offline and counts the days you spend in each country, to keep visa and/or residency requirements according to your goals. It will tell you which country you need to visit or when you need to leave in order not to overstay your visa.

It can also keep track of your documents (passport, drivers license, residency card, ID card...), so you plan on renewing it in time.

Encrypted, fully offline, but you can import a standardized json file for both new documents or new stays, so you don't have to type things manually. People have been doing this in cloud (with services such as nomadlist), but telling a third party where you are in the world is not the way. We can do better. And we do.

https://zapstore.dev/apps/app.tally

Black Friday yourself into privacy++.

I company I founded was operating free mail services for years, so I know something about running an e-mail service. But at some point, I stopped running my own SMTP servers, because Proton's network effect at least in my circles is just good enough - autodiscovery of PGP keys works quite well. And I'm quite satisfied with the service.

Running on surveilled big corpo "free" infrastructure? No thanks. Free mail is paid for with your inbox. Someone reads it and builds your profile. And sells what they learn. I would rather be the customer than the inventory.

Proton's Black Friday runs from October 26 to November 30. Mail Plus is 60% off the yearly plan, and Proton Unlimited, which bundles Mail, Drive, VPN and Pass, is 50% off.

Privacy tech still not only exists, it is thriving.

https://go.getproton.me/aff_c?offer_id=7&aff_id=9011

BTW: Proton also has Drive (which has photo backups) and other services, include AI inference. Check them out. We also use Proton Calendar, it has become quite good recently.

BTW: If you are already using some private service, or still deciding, check out Praxeology of Privacy by @Max Very good. https://towardsliberty.com/pop - also available in Slovak!

I am vibing my own apps now, as is everyone I know. But there are some cool apps developed by others that you should definitely use. One of them is Offline Speech to Text (OSTT).

It is a keyboard and voice recognition service, that other apps can use (White Noise can use it by default for example, which I use a lot, since I interact with my agents using White Noise). If you are bilingual (send messages in multiple languages): Choose Canary V2 instead of default Parakeet, it will allow you to steer language detection. Go to model preferences after it downloads, set language to Automatic and under it choose "Languages I speak" (I set English and Slovak). This way the languages is detected and it won't try for example Czech, because it knows I speak either English or Slovak.

Fast, fully offline, your speech (or the text) never leaves your device. It is super high quality and fast.

Another pro-tip: For lower latency, increase number of threads to 4.

Available on Zapstore. Cypherpunk future is now.

https://zapstore.dev/apps/naddr1qqtkzurs9ehkvenvd9hx2umsv4jkx6r5da6x27r5qyv8wumn8ghj7un9d3shjtn6v9c8xar0wfjjuer9wcpzpys5pkhzxd9dqp4ger8du6p5f6y43tcnzqktjzmwvahq5vumtay4qvzqqqr7pv8t57pf

Routstr ( @routstr ) confidential mode update, live on routstr.cypherpunk.today and in the demo PWA (v0.1.31):

- The node's signed offer now defines which request parameters it pins. Clients enforce one rule: a pin may only switch an extra off.
- Fairer billing: idle connections can't block paying clients, a long response gets time to finish, only attested usage is charged, the node's own provider-key errors cost only the session fee, prompt-cache writes are billed correctly, and a failed database write is retried instead of charging the full reservation.
- Hardening: the proofs also bind the record's content type, proof connections need a per-session token, clients refuse unsafe offers and limit how much the node can make them buffer, and the browser pre-warms only after your first message.
- Sidecar: session files are deleted after 24 h, and the container is built from digest-pinned base images with no package installs.
- Upstream: the v2 PRs are rebased, plus six separate fixes for every Routstr node: admin login, revoking credentials, startup reservations, log redaction, no caching of API keys, private logs.
- Paper: every figure is backed by archived receipts and runs, or marked as unarchived.

Your prompts and the model's answers stay private from the node, and you never get its API key.

https://jooray.github.io/routstr-confidential-pwa/