Tripwire: A new anti evil maid defense
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
If you have heard of [Haven](https://github.com/guardianproject/haven), then Tripwire fills in the void for a robust anti evil maid solution after Haven went dormant.The GitHub repo describes both the concept and the setup process in great details. For a quick overview, read up to the demo video.There is also a presentation of Tripwire available on the Counter Surveil podcast: https://www.youtube.com/watch?v=s-wPrOTm5qo
HN · launched Dec 11, 2025 · 82 upvotes (top 13%) · 0 views
Niche: security screening and access governance software · 54 launches, 6 in the last 7 days · Explore this niche →
Category and tags
- Security
- Compliance & governance
- Prosumer
- Not AI
- Hobby / open-source project
Visit website ↗ Source listing ↗
More like this: all 54 launches in security screening and access governance software →
Could you build this?
Partial While an app that monitors sensor events can be coded easily, designing an untamperable 'evil maid' defense requires secure hardware attestation, cryptographic verification, and deep OS security engineering.
What it would actually take: A proper anti-evil-maid system requires an Android/embedded device interacting with TPM 2.0 or hardware keystores, using cryptographic challenge-response protocols (e.g., TOTP or public-key signing via encrypted communication channels like Signal/Tor) to verify device integrity. The primary challenge is hardening the sensor-monitoring device against physical compromise, bypassing, or network spoofing while managing false alarms.
Discussion
20 comments analyzed.
Concerns raised: Incremental key rotation allows attackers to compute past keys, unlike hashing, False positives from insects/bugs could trigger excessive secret rotations and confuse users, Symmetric key compromise enables attackers to forge security footage, unlike asymmetric design, Nail polish tamper detection can be defeated by carefully removing and reapplying the polish layer, Low practical likelihood of successful real-world deployment
Feature requests: Rotate secret on every frame regardless of trip status, with boolean flag indicating active trip, Include timestamp and signed MAC data with each frame to prevent backdating after compromise, Add more diagrams to explain key pair signing and persistent network outage scenarios, Derive new secrets via hashing instead of deleting, to maintain record of all trips including false alarms
Competitors
Other products that read as similar to this one : 8 launches clear the similarity bar.
Attention rank: #3 of 9 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 6 days after the earliest competitor.
- GhostBox · hn · 2026-05-01 · 126 upvotes · similarity 0.33
- I created a BGP-based blackhole system that you can set up in minutes · hn · 2026-09-30 · 7 upvotes · similarity 0.32
- Haven · hn · 2025-12-05 · 10 upvotes · similarity 0.31
- Netrinos · hn · 2025-12-19 · 93 upvotes · similarity 0.31
- Veyrnox · ph · 2026-09-16 · 2 upvotes · similarity 0.31
- EvilBox · github · 2026-09-23 · 12 upvotes · similarity 0.30
- Self-healing review gate and knowledge base for Claude Code (Beta) · hn · 2026-07-05 · 5 upvotes · similarity 0.30
- Confluencebuild · ph · 2026-11-10 · 1 upvotes · similarity 0.30
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.