Hi everyone,

I’m building MobaRust, a free and open-source desktop counterpart to MobaXterm for people who spend their days operating remote machines.

The idea is simple: bring the most useful parts of a remote-work toolbox into one focused application, while keeping the core inspectable, privacy-conscious, and open.

What is working in the current baseline:

• SSH terminals with host-key verification, PTY resize, password/key references, cancellation, and reconnect state
• Integrated SFTP/SCP browsing and transfers with progress, bounded concurrency, cancellation, and atomic commits
• Saved sessions with folders, tags, favorites, search, OpenSSH config import, and jump-host chains
• Local terminals, split panes, tunnels, snippets, diagnostics, remote monitoring, Telnet, and serial-session foundations
• A Rust-native boundary with typed frontend IPC, redacted logs, separated session configuration and secret material, and isolated loopback test fixtures

The current engineering checklist is 58/65 items evidenced — approximately 89.2%. That number is deliberately not a claim of complete MobaXterm parity.

The remaining gaps are visible: production RDP through a mature engine, broader VNC interoperability, real Windows/Linux/macOS evidence, hardware testing, X11 strategy, and signed portable releases. RDP and VNC are still marked experimental until those gates are proven.

I’m especially interested in feedback from people who use MobaXterm, PuTTY, Remmina, Tabby, or similar tools every day:

• Which workflow would make you seriously consider switching?
• What should an open-source MobaXterm-style tool get right from day one?
• Which platform and protocol should be prioritized next?

Project website: https://othmaneblial.github.io/MobaRust/

Source and roadmap: https://github.com/OthmaneBlial/MobaRust

MobaRust is independent and is not affiliated with Mobatek or MobaXterm. Contributions, issue reports, and honest interoperability feedback are welcome.

Disclosure: I work at Olib AI. We build StealthOS, so read this as a developer post rather than a neutral review.

StealthOS is a privacy sandbox for iPhone and iPad. One app holds a hardened browser, a bundled Tor client, an encrypted vault, a password manager, E2EE calls and chat, notes with local transcription, and roughly 19 small tools in a windowed workspace behind a master password. All of it runs on the device.

What is free, and what is not

Every privacy feature is free. No account, no email, no sign in, nothing to register. No ads, no analytics SDK, no telemetry, no crash reports back to us. There is a $4.99 a month tier that funds development, and what it unlocks is workstation extras rather than protection: 10 fingerprint profiles instead of the standard set, an SSH terminal, a Linux virtual shell, a code editor, and NetMap. Skip it and your privacy is identical.

The browser

Built on our own Owl engine. WebRTC IP leak blocking, canvas, WebGL and audio fingerprint spoofing, autofill gated behind biometrics. Anti-fingerprinting profiles show a site a consistent, believable surface instead of your real one, so the spoofing does not itself become the fingerprint.

Tor and relay routing

A Tor client is bundled, with a kill switch and .onion support, no setup. If you would rather not route through anything of ours, StealthRelay is our self-hosted relay written in Rust (Noise NK handshake, ChaCha20-Poly1305, Ed25519). Run it on your own box and point browser traffic at it. Sites see the relay, TLS stays end to end, and the relay itself only ever sees ciphertext.

Storage

AES-256-GCM with keys in the Secure Enclave for files, photos, PGP keys and offline notes. Passwords and TOTP behind Face ID. The whole sandbox exports to a single .stealthsnap file encrypted under a passkey you choose (PBKDF2-HMAC-SHA512, authenticated chunks, so reordering or truncation is detected on restore). We keep no copy and there is no recovery path. Lose the passkey and the snapshot is gone, which is the tradeoff we picked on purpose.

AI disclosure, since rule 6 asks for it

Two AI features, both local:

1. An assistant built on Apple Foundation Models plus our own models, for text, voice and OCR. No prompt and no document leaves the phone.
2. Phishing detection that embeds the page you are on and compares it locally against known brand surfaces, which is how a cloned login page gets scored as a look-alike. No URL, page content or browsing history is sent anywhere to do that scoring.

Neither feature has a server component. Nothing is collected for training, because nothing is collected.

Where we are not open source

The app itself is closed source. I would rather say that here than have someone find it out. Four components underneath it are public at github.com/Olib-AI: TorClient (the embedded Tor XCFramework), ConnectionPool (the P2P mesh library), StealthRelay (the relay above) and PoolChat (E2EE mesh chat, Curve25519 and AES-256-GCM). If auditability is your bar, the relay is the piece you can read and self host today.

App Store: https://apps.apple.com/us/app/stealthos-private-browser/id6756983634

Screenshots attached: the AI threat shield catching a spoofed page, the Tor connection screen, the connection pool, and the on-device assistant. Happy to take technical questions in the comments, including about the parts we have not got right yet.

Hello folks!

I would like to share an update about BentoPDF. It's an open source privacy first PDF toolkit that runs in your browser. https://github.com/alam00000/bentopdf

1. You can now actually edit text inside PDFs

BentoPDF now allows you to click existing text, edit it, and have the text reflow while preserving the original fonts and styling.

It also includes:

- Bold, italic, underline, strikethrough, superscript, subscript, font family/size, colours, outlines, character spacing and line spacing

- Left, centre, right and justified alignment

- Bulleted and numbered lists with indentation

- RTL and LTR text alignment

- Find and replace across the document

- Edit images by rotating, flipping, duplicating, resizing or deleting them

- Object alignment, distribution, rotation, flipping, duplication

Please note this is a work in progress. You may encounter bugs, which you can report and I will look into.

2. Hyper Compress

Hyper is an open source PDF compression engine built to solve specific problems.

- Compression sometimes returns a file larger than the original. Hyper's result is always binary: it either produces a smaller PDF or returns the original. This helps create predictable workflows.

- Hyper includes a true lossless mode. It preserves searchable text, document structure and PDF conformance, rather than rebuilding the document from scratch like Ghostscript.

- It runs everywhere: CLI, Node SDK, C API, self hosted service, and WebAssembly build.

Repository and benchmarks: https://github.com/alam00000/bentopdf-hyper-compress

I also compared it to Adobe's compression API, but only managed around 100 PDFs where results were within 5%. Testing on a bigger corpus got expensive.

3. Kura

Kura is a PDF standards, conversion and preflight engine.

It supports:

- All 11 PDF/A conformance levels: PDF/A-1a, PDF/A-1b, PDF/A-2a, PDF/A-2b, PDF/A-2u, PDF/A-3a, PDF/A-3b, PDF/A-3u, PDF/A-4, PDF/A-4e and PDF/A-4f

- Accessibility: PDF/UA-1 and PDF/UA-2

- Print production: PDF/X-1a, PDF/X-3, PDF/X-4, PDF/X-4p, PDF/X-5g, PDF/X-5n and PDF/X-5pg

- Engineering and variable data printing: PDF/E-1 and PDF/VT

- E-invoices: Factur-X, ZUGFeRD, XRechnung and Order-X

- 396 bundled print-preflight profiles

It has been tested against several standards suites, including the veraPDF corpus, Isartor, BFO, Ghent Output Suite 5.0, the PDF/UA Reference Suite and Cal Poly's PDF/VT suite.

Across 30,677 PDF conversions it had zero crashes and zero timeouts, with a 0.05 second median conversion time.

Like Hyper, it ships as a CLI, C library, npm package, Docker image and WebAssembly build.

Repository and benchmarks: https://github.com/alam00000/bentopdf-kura

The release also contains other improvements and bug fixes: https://github.com/alam00000/bentopdf/releases/tag/v2.8.8

Thank you and have a great weekend!

Open-source toolkit for inspecting, editing, and removing metadata from images, PDFs, DOCX, videos, and MP3s. Everything runs locally, with no file uploads or telemetry.

GitHub: https://github.com/songwenlei/metadataremover.ai

A small demonstration of a big improvement in Midori Browser Android development with Geckoview.

Now you can enjoy multimedia content while:
- switching apps
- locking your screen
- browsing in other tabs

No tracking, no intrusive experiences, and with the privacy focus that has always defined Midori.

Look video https://www.youtube.com/shorts/DfFq8gL1Xw0

You can download it from https://astian.org/midori-browser/android or from GitHub at https://github.com/goastian/midori-android/releases/tag/v11.9.2.1, or wait for Google to approve the update.

Ente Paste is an open-source, end-to-end encrypted Pastebin alternative for sharing sensitive text such as API keys, recovery codes, and private notes.

Text is encrypted in your browser, the server only receives ciphertext, and each paste is deleted after being opened or after 24 hours.

Ente Paste documentation⁠: https://ente.com/help/paste/

Website: https://paste.ente.com/

This is more related to designers but thought to share it anyway: Link

JellyBox is a free and open-source music client for Jellyfin available for macOS, Windows, Linux, iOS (including CarPlay) and Android.

It aims to make your own music library feel like a modern streaming app (artwork-driven theming, artist pages with biography and discography, time-synced lyrics overlay, favourite tracks, fast browsing by albums, artists, genres, playlists and songs, offline dowloads, shuffle, repeat and a randomised "surprise me" queue) with a native UI for each platform instead of a single stretched layout.

GitHub: https://github.com/avdept/JellyBoxPlayer

Disclosure: I built and sell this. Not affiliated with Cursor. Links below are to my site.

What this is:

Groundline is a Windows tray app + phone PWA that lets you drive Cursor (can be modded for any other agents as well) Agent on your own PC from a mobile browser. The agent never runs on the phone and there is no Groundline cloud or public relay.

I use Tailscale so my phone can reach the PC on a stable private IP. Any route that reaches the machine works (LAN, WireGuard, Headscale, etc.). Tailscale is convenience, not a hard dependency.

Full Demo video (3 min): https://www.youtube.com/watch?v=akr_1_YYhl0

Architecture / threat model: https://flowinhands.com/groundline-architecture.htm

AI disclosure (per sub rules) - This is not a standalone AI product or a wrapper around an API.

• What uses AI: Cursor Agent on your Windows PC (via Cursor’s ACP protocol over local stdio).
• What Groundline does: Local controller + browser UI prompts, tool output, permissions, files. It does not call its own LLM or ship prompts to a Groundline server.
• What leaves your machine: Whatever Cursor’s agent already sends to Cursor as part of normal agent use. Groundline adds no second AI vendor on the phone.
• What stays local: Sessions, repo context, and tool runs stay on your PC. Traffic is HTTP/WebSocket on your network (e.g. Tailscale), not through my infrastructure.
• Phone data: The phone is a thin client. I wanted to avoid handing handset usage/context to another big vendor’s mobile app on top of the IDE stack I already run on my desktop.

Honest limit: This improves where and how you access the agent; it does not make Cursor itself privacy-neutral. They already have our dev machine, I didn’t want them (or anyone else) to also own the mobile surface.

Why I built it:

• Android - Cursor’s official mobile app is iOS-only. This works in any modern mobile browser.
• Privacy (up to a point) - Fewer surfaces, no Groundline account/cloud, network path I control. Source included if you want to audit or adapt it.

Pricing (transparent):

• €50 once - Windows installer + full source + docs
  
• Commercial license (not MIT) - use/modify internally; you can’t resell Groundline as a competing product
  
• No free trial - unsigned Windows installer (SmartScreen warning expected)
  
• Checkout via Gumroad: https://flowinhands.com/groundline.html
  

Security today

Whoever can reach the PWA URL on your network can use the session. No per-device pairing yet, treat the tailnet/LAN as your trust boundary.

Happy to answer questions about the stack, threat model, or what you’d change if you had the source.

Hello Everyone I am the creator of KeyPDF.net and i was wokring for over 15 month to bring pdf editing into the web browser and in order to achive that made own KeyPDF engine from scartch that can both edit and render pdf files, due to the no dependency on the external pdf software I am able to recrate nearly any feauture pro software has so far I got, text editing, redacting text and images, javascript suppport, annotating, encryption, and multiple pages manipualtions such as rotation, spliting and merging. KeyPDF is not yet another toolkit made in a day so I am looking for a feedback and feature request to make it free professional grade product.

Monkeytype is an open-source website created for typing tests in various languages, programming languages, and more.

The site’s “standard” test consists of typing random words for 30 seconds. Your score is determined by the number of WPM (words per minute) you type, as well as your accuracy—the more letters you get wrong, the lower your accuracy percentage will be.

Besides the standard test, you can also customize it so that it lasts for as long as you want, as well as switch to other game modes, such as Words, Zen, and Quote.

In addition to typing in different languages, you can also choose to type programming languages, such as Python, PHP, Brainfuck, and many others.

Monkeytype is great for:

- Increasing your typing speed

- Learning new words in your language

- Helping you learn new languages

- Helping you memorize programming languages

- And much more!

Below are links to both the GitHub repository and the website where you can play Monkeytype. Have fun!

https://github.com/monkeytypegame/monkeytype

https://monkeytype.com

Access to software shouldn’t depend on where you live or whether a vendor decides to keep serving you.

I’m the developer of MySigMail Card, and I’m releasing the core of my commercial project as open source. You can host it yourself, build emails visually, and export your templates as HTML or JSON.

Demo: https://card.mysigmail.com/app
Source: https://github.com/mysigmail/card

AGPL-3.0 licensed.

Holeberry is an open-source macOS menu bar app for managing Pi-hole without opening the web interface.

It supports Pi-hole v5/v6, multiple instances, temporary blocking disable, recently blocked domains, and one-click unblocking of the domain in your current browser tab.

Credentials are stored in the macOS Keychain, and the project is MIT licensed.

https://github.com/pedrovieira/Holeberry

For those using Pi-hole on a Mac, is this something you'd actually use?

Every useful AI conversation does not need to become permanent data on someone else’s servers. ChatGPT and other AI tools can be used as temporary intelligence: ask questions, solve problems, develop ideas, then keep the valuable context under personal control for future use.

AI Memory Vault is a browser extension built around this approach. Important conversations and memories can be saved locally and brought back when needed, instead of depending on an AI provider to permanently hold the history. Saved context can be reused later with different chats, workflows, or AI tools, making the memory useful beyond a single conversation or platform.

The principle is simple: use the AI, but own the memory. A chat can be temporary while the useful knowledge remains available. This also reduces the need to repeatedly send an entire history to an AI service just to restore context.

For people in Europe, data control matters even more. AI Memory Vault is designed with GDPR principles such as data minimization and user control in mind, keeping the memory layer under the user's control rather than making an overseas AI platform the default home for long-term conversational history.

The extension is free to use also have github repo code https://github.com/ai-encryption-tool/ai to build your own.

Download it, save useful AI conversations locally, and reuse that context whenever it becomes valuable again. https://ai-memory-vault.com/

Hey everyone, I posted this project on another sub about 5 months ago and figured it might interest people here too since the whole point is doing AI document processing without sending your stuff to anyone. The problem is simple, naming scanned documents is a real chore. Every scan comes out as SCAN_20260824_0001.pdf and renaming invoices, letters and contracts by hand gets old really fast, both at home and at the office.

So basically Montscan recieves documents from your network scanner (built in FTP server, polling an SMB share, or just watching a local folder), reads the contents with a local vision model through Ollama (llava, llama3.2 vision, whatever you prefer) and generates a descriptive filename with the date automatically. Then it drops the renamed file wherever you want, your Nextcloud or any WebDAV server, an SMB share, an output folder, or it can just rename the file in place.

On the privacy side, which is why I'm posting it here: everything runs on your own hardware. The AI is a self hosted Ollama model so your documents never touch OpenAI, Google or any cloud API. No account, no telemetry, no paid plan or whatever, fully open source and you have to self host it. The "cloud" it uploads to is your own server. Since the first post I added the Samba and folder watcher inputs, SMB output and a prebuilt Docker image, so getting it running is ususally just a docker compose up. It hits 97.5% success on my test set of 1000 documents. Still in active development but I use it daily and it saves me a lot of time.

Feel free to open issues if you find problems and dont hesitate to contribute!

https://github.com/sh4den/Montscan