Developer Builds Open-Source Zero-Knowledge 2FA App Using Rust, Tauri, and React

·2 views

A developer has released OtpVault, an open-source two-factor authentication app designed to sync 2FA codes across devices without exposing plaintext secrets to any cloud provider. The app uses Argon2id key derivation and AES-256-GCM encryption entirely on the client side, meaning only encrypted data is ever stored or transmitted to the cloud. Built with a Rust backend, Tauri v2 for desktop and Android support, and a React 19 frontend, the project targets users concerned about closed-source authenticator apps. Cross-device sync is handled via a polling mechanism every 10 seconds, where the encrypted vault is fetched, decrypted locally, merged, and re-encrypted before being pushed back. The project is publicly available on GitHub and deployable via a Vercel-hosted web app, with the developer welcoming contributions and feedback.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

TekPedal Releases Open Turkish EV Charging Intent Dataset for AI Routing

TekPedal, a Turkish EV charging map and vehicle decision platform, has published an open-source dataset of 192 Turkish queries designed to help AI assistants correctly identify and route electric vehicle-related user intents. Version 1.0.0 covers eight intent categories — including station finding, price comparison, route planning, and battery health — with 24 records each. The dataset is released under a CC BY 4.0 licence and includes fixed training, validation, and test splits to support reproducible evaluation. All entries were synthetically generated from editorial templates rather than real user data, ensuring privacy compliance while enabling transparent redistribution. The dataset is accessible via GitHub and has a permanent citable release on Zenodo with DOI 10.5281/zenodo.22062688.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

.NET 10 Makes Missing PackageReference Versions a Hard Restore Error

.NET 10 introduces error NU1015, which causes restore to fail outright when a PackageReference is declared without a version, replacing the earlier NU1604 warning that previously allowed restore to continue. Before this change, NuGet would silently resolve the lowest available package version, a behavior Microsoft now classifies as a stable breaking change in its .NET 10 compatibility guidance. The challenge is that a versionless PackageReference is also the correct syntax when using NuGet Central Package Management (CPM), where versions are defined centrally in a Directory.Packages.props file. Developers must first determine whether a direct reference or a CPM policy should own the version, since blindly adding versions everywhere can unintentionally bypass repository-wide package governance. Microsoft's compatibility documentation and the CPM guide both outline the correct fix depending on which ownership model a project uses.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

RustChain's Proof-of-Antiquity Proposes Old Hardware as Alternative to Wealth-Based Staking

A technical article on DEV Community compares RustChain's Proof-of-Antiquity (PoA) consensus mechanism against Proof-of-Stake systems used by networks like Ethereum, Cardano, and Solana. Proof-of-Stake has been criticised for concentrating power among wealthy validators, with data showing the top seven entities controlling over 50% of staked ETH on Ethereum. PoA instead assigns higher block rewards to older hardware — a 1989 Intel 486 earns a 3.5x multiplier versus 1.0x for a modern processor — on the basis that hardware age cannot be purchased or fabricated. The mechanism's central argument is that elapsed time represents a form of Sybil resistance that capital alone cannot replicate, unlike energy expenditure in Proof-of-Work or token accumulation in Proof-of-Stake. The article draws on RustChain's source code to examine how each consensus model handles decentralisation, economic fairness, and network security.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Five open source tools compared for testing LLM apps against prompt injection

Developers building LLM-powered applications such as support bots, agents, or RAG pipelines face a critical question: whether their systems have been properly tested for prompt injection vulnerabilities. Five open source tools — promptfoo, garak, Giskard, PyRIT, and sentinel-scan-cli — are commonly used for this purpose, but they target different layers and serve distinct use cases. A key distinction separates app-layer tools like promptfoo, Giskard, and sentinel-scan-cli, which test how an application's prompts, guardrails, and logic resist attacks, from model-layer tools like garak, which probe the underlying model's raw vulnerabilities. Promptfoo is highlighted as the most broadly adopted app-layer option, offering 50-plus red-team plugins and compliance mappings to OWASP LLM Top 10, NIST, and MITRE ATLAS, while garak, maintained by NVIDIA with over 8,100 GitHub stars, is better suited for evaluating base models. Notably, Microsoft archived PyRIT on GitHub in March 2026, making it read-only with no further development, so new users are advised to consider alternatives.

0 comments Read more at DEV Community