Nicheloom visits: 58,094 all-time · 7,637 in the last 7 days

The opportunity tracker for new startups.

Today: 1,953 launches · Niche of the day: specialized calculation tools · See what launched today →

I built an encrypted BLE dongle for pasting stuff to air-gapped devices

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

Definitely one of those "20 minute adventure gone wrong" projects where all I wanted initially was a quick wireless rubber ducky for bitlocker keys and the like and then I kept adding stuff like AES-256.....Currently working on adding WebAuthn/FIDO support because the hardware is already there and scope creep is a lifestyle at this point.Would love feedback, especially on the security side. Repo and PCB files are fully open source.

HN · launched Jul 4, 2026 · 5 upvotes (top 89%) · 0 views

Niche: open-source hardware and maker electronics · 180 launches, 3 in the last 7 days ▼ -73% · Explore this niche →

Category and tags

  • Security
  • Hardware & robotics
  • Prosumer
  • Not AI
  • Hobby / open-source project

Visit website ↗ Source listing ↗

Could you build this?

No Creating custom physical BLE dongle hardware with encrypted air-gapped keystroke injection (BadUSB/HID) and WebAuthn/FIDO firmware demands custom PCB design, embedded C/Rust, and hardware cryptography.

What it would actually take: Building this device requires custom PCB design (KiCad), microcontroller selection (e.g., nRF52840 or ESP32-S3), and low-level firmware development in C or embedded Rust. The hard parts include USB HID stack emulation, Bluetooth Low Energy security pairing, AES-256-GCM hardware crypto integration, and implementing the FIDO2/WebAuthn CTAP2 protocol. This necessitates hardware engineering, embedded systems development, and hardware-level cryptographic expertise.

Discussion

6 comments analyzed.

Competitors mentioned: InputStick, ShareToInputStick (Android F-Droid app)

Concerns raised: AES key stored in browser IndexDB vulnerable to dumps, Password length leaked via keystroke-by-keystroke BLE packets, Missing replay attack protection, Lack of session-specific key negotiation, Insufficient documentation on security implementation

Feature requests: FIDO support, Argon2id password derivation instead of Argon2, Obfuscated packet sending with random padding, Per-session ECDH key negotiation, Commercial hardware assembly/sales option

Competitors

Other products that read as similar to this one : 430 launches clear the similarity bar, closest 8 shown.

Attention rank: #396 of 431 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 248 days after the earliest competitor.

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.