Project ideas from Hacker News discussions.

We have a year to fix security everywhere

📝 Discussion Summary (Click to expand)

1. LLMs accelerate vulnerability discovery and exploitation
"I don't think we even have a year. The current batch of LLMs are ferociously good at identifying vulnerabilities." – simonw

2. Interest in microkernel OS as a more secure alternative
"Or we could just dump Linux and Windows and switch to a microkernel operating system, which is much more secure." – hn_submit

3. Memory safety and hardware mitigations are crucial but adoption is slow
"Thankfully we have already made good progress towards things like arm memory tagging and memory safe languages." – Gigachad

4. WordPress/plugin ecosystem is insecure; simplicity and static sites advocated
"Here's an idea: as a first step, simplify everything, and make sure you're aware how your stack works, and what it imports." – pmlnr

5. Systemic lack of incentives and accountability hinders security improvement
"The reason is simple - nothing really bad has happened that we can point at and say 'ah, shit, let's all learn collectively'." – tokioyoyo


🚀 Project Ideas

Microkernel VPS Hub

Summary

  • Provides one-click deployment tutorials and pre-configured images for running microkernel/seL4/Genode/Unikernel OS on VPS to host websites securely.
  • Core value proposition: lowers the barrier to adopt microkernel-based hosting, offering better isolation and reduced attack surface.

Details

Key Value
Target Audience Developers and sysadmins interested in OS security, especially those hosting personal or small business sites
Core Feature Curated VPS images, step‑by‑step guides, and automation scripts (e.g., Terraform/Ansible) to boot microkernel OS and run NGINX/Unikernel web stack
Tech Stack QEMU/KVM, Terraform, Ansible, Docker (for building images), documentation site (MkDocs), optional CI for image builds
Difficulty Medium
Monetization Hobby
#### Notes
- HN commenters expressed desire for tutorials on using microkernel OS on a VPS (simonw) and noted Minix3/seL4/Genode as options (rramadass).
- Could spark discussion on trade‑offs between performance and security, and encourage experimentation with unikernels for web workloads.

Plugin Vulnerability Auto‑Patcher

Summary

  • Continuously scans popular plugin marketplaces (WordPress, Adobe Commerce, etc.) using LLMs to discover known and zero‑day vulnerabilities, then automatically generates patch pull requests for maintainers.
  • Core value proposition: reduces the window of exposure for widely used plugins by turning LLM‑found bugs into actionable fixes faster than manual processes.

Details

Key Value
Target Audience Plugin maintainers, security teams of SaaS platforms, and agencies managing many client sites
Core Feature LLM‑driven vulnerability detection across plugin codebases, automated patch generation, and PR creation via GitHub/GitLab APIs
Tech Stack Python, LLM API (e.g., open‑weight GLM‑5.3 or similar), GitHub/GitLab CI integration, database for tracking findings, optional sandbox for patch validation
Difficulty High
Monetization Revenue-ready: SaaS subscription per monitored repository or per‑scan volume
#### Notes
- HN users highlighted a surge in RCEs in Adobe Commerce plugins (hnsr) and the speed at which LLMs uncover bugs (mc3301, le‑mark).
- Provides a concrete way for defenders to leverage LLMs beyond one‑off prompts, addressing the need for continuous defensive AI assistance.

StaticSiteCMS

Summary

  • A WYSIWYG editor that feels like WordPress but outputs a static site (HTML/CSS/JS) which can be hosted on any static‑file host (S3, GitHub Pages, Netlify) with a single “Publish” button.
  • Core value proposition: gives non‑technical users the familiar WordPress admin experience without the PHP attack surface, enabling secure, low‑maintenance sites.

Details

Key Value
Target Audience Bloggers, small business owners, and non‑technical users who want a simple site without dealing with servers or plugins
Core Feature Drag‑and‑drop editor, media library, theme/template selector, one‑click static export and deploy to popular static hosts
Tech Stack Electron or Tauri desktop app (or SaaS React frontend), backend in Node.js/Rust for static site generation (using Eleventy or Hugo), integration with AWS S3, GitHub Pages API
Difficulty Medium
Monetization Hobby
#### Notes
- HN thread repeatedly asked for a WordPress‑like admin that outputs static files (Helmut10001, pmlnr, getpublii.com) and noted the difficulty of existing static generators for normal people.
- Would likely generate discussion on balancing ease of use with flexibility, and could reduce reliance on vulnerable PHP‑based CMSs.

C/C++ to Rust Migration Assistant

Summary

  • IDE plugin that analyzes existing C/C++ codebases, suggests equivalent Rust implementations, highlights unsafe patterns, and can generate pull requests to replace modules with safe Rust code.
  • Core value proposition: accelerates adoption of memory‑safe languages by providing automated, refactor‑focused assistance, reducing manual effort and risk.

Details

Key Value
Target Audience C/C++ developers, teams maintaining legacy systems, and open‑source projects looking to improve safety
Core Feature Static analysis to map C/C++ constructs to Rust, safety‑annotation suggestions, automated test generation, and PR creation workflow
Tech Stack Rust‑based analyzer (using rustc‑dev or clang bindings), Language Server Protocol (LSP) plugin for VS Code/VS Code, CI integration for verifying generated Rust
Difficulty High
Monetization Hobby
#### Notes
- Discussion highlighted widespread dissatisfaction with C/C++ security (pjmlp, bsenftner) and the desire to move to safer languages without massive rewrite effort.
- Tool would address the pain point of “we really just need better regulations… but also we need practical ways to migrate code.”

Defender LLM Code Review Plugin

Summary

  • An IDE / PR‑review assistant that uses a fine‑tuned LLM to review code for security flaws, suggest fixes, and generate patch diffs, requiring developer approval before applying.
  • Core value proposition: brings LLM‑powered defensive security into the everyday developer workflow, turning the technology that attackers use into a proactive defense aid.

Details

Key Value
Target Audience Software engineers, DevSecOps teams, and open‑source maintainers who want continuous security feedback
Core Feature Real‑time code scanning, vulnerability highlighting, automated fix suggestions, and optional PR creation; integrates with GitHub Actions for CI gating
Tech Stack Fine‑tuned LLM (e.g., Qwen or similar), hosted via an inference endpoint (could be local with GGUF), VS Code extension, webhook receiver for PR events, sanitizer/rules engine for validation
Difficulty Medium
Monetization

Read Later