Project ideas from Hacker News discussions.

I got into YC Startup School by hacking it

📝 Discussion Summary (Click to expand)

1. Privacy & Security Risks of Paxel

“It only uploads your AI agent transcripts, so if you don’t use AI there’s nothing to upload.” — tomhow
“instead, to borrow cory doctorow's framing, it is designed to do something to me rather than for me.” — palmotea

YC’s tool moves users’ code and session data to external AI services, raising concerns that the collection is built for YC’s advantage, not the applicant’s.

2. Invasive AI‑driven Evaluation Process

“I should run a script, a very easy‑to‑use cURL one‑liner that installed something on my computer and analyzed every line of code I’ve written... Yikes! I hope this is NOT the future of hiring.” — rationalist

Applicants are asked to execute a script that harvests every code edit and sends it to YC’s servers, prompting fears that the process will become a de‑facto hiring gate.

3. Founder Bias & VC Culture Critique

“most VCs aren’t founders and those who are ex‑founders usually made pretty terrible companies.” — moomoo11

The discussion reflects skepticism that YC’s inner circle—mostly ex‑founders turned investors—favor narratives and capital over genuine technical merit, often rewarding “g‑brain” hacks rather than substantive work.


🚀 Project Ideas

Privacy‑First Coding Agent Auditor

Summary

  • A locally‑run CLI that captures and analyzes coding‑agent transcripts without ever sending raw data to external servers, addressing privacy fears around Paxel.
  • Core value: Complete data ownership for founders; only aggregated, redacted scores are optionally uploaded to a neutral federation.

Details

Key Value
Target Audience Early‑stage founders and startup applicants who use AI‑assisted development tools
Core Feature Local transcript parsing, automated redaction, encrypted optional score upload to a neutral federation
Tech Stack Rust (CLI), SQLite for local storage, React + Electron for UI, Web Crypto API for zero‑knowledge proofs
Difficulty Medium
Monetization Revenue-ready: $12/mo per user

Notes

  • HN users repeatedly warned that “Paxel sounds like it would be a pretty fun tool … instead it is designed to do something to me rather than for me.” This product flips that by doing the work for the user.
  • Potential for viral adoption among YC applicants seeking a trustworthy alternative to YC’s own data‑harvesting script.

Data LeakGuard Browser Extension

Summary

  • A browser extension that monitors and logs all network requests made by startup‑application web tools, alerting founders instantly if sensitive data is being transmitted.
  • Core value: Immediate visibility and control over data exfiltration risk.

Details

Key Value
Target Audience Founders and developers using web‑based application portals (e.g., YC Startup School, other accelerator forms)
Core Feature Real‑time request inspection, automatic blocking of PII/secret key uploads, exportable audit logs
Tech Stack TypeScript, Chrome Extension APIs, React, Service Workers
Difficulty Low
Monetization Hobby

Notes

  • Commenters like TZubiri asked “Would you trust a contractor that asks for root, and your master password?” This tool answers that by letting users see exactly what is being sent.
  • Could spark discussion on Hacker News about regulator‑grade transparency for startup application platforms.

Zero‑Knowledge Startup Profile Builder

Summary

  • A web service that lets founders generate cryptographic proofs of their key metrics (e.g., GitHub activity, funding raised) without revealing underlying data, enabling secure application submission.
  • Core value: Prove eligibility without exposing raw code or personal data.

Details

Key Value
Target Audience Startup founders applying to accelerators or venture programs that request detailed performance metrics
Core Feature ZKP generation of metrics, verifiable by program operators, UI for uploading only public artefacts (e.g., GitHub public repo links)
Tech Stack TypeScript/Node.js, zk‑SNARK library (circom), Next.js front‑end, IPFS for storage
Difficulty High
Monetization Revenue-ready: $1 per verification

Notes

  • HN discourse highlighted the tension “they are gathering intel on over hundred of thousands of startups… the ratio of applicants to fundings is continuously going down.” This service mitigates that by eliminating raw data collection.
  • Offers a clear, defensible alternative that aligns with YC’s historic “ideas are worthless” mindset while protecting founder IP.

Read Later