Godmode Bot: Open-Source AI Agent Handles Logins and 2FA Without Exposing Passwords

·23 views

A developer has released Godmode Bot, a free open-source AI automation tool that can log into websites and handle two-factor authentication without ever exposing credentials to the underlying AI model. The desktop app, built with Tauri 2, runs on macOS, Windows, and Linux, and can also operate headlessly on servers or devices like a Raspberry Pi. Passwords and TOTP secrets are stored in a local encrypted vault using AES-256-GCM encryption, and are typed directly into browser fields via Chrome DevTools Protocol rather than passed through the AI's context. Users can import existing credentials from popular password managers including 1Password, Bitwarden, and Chrome, and can configure multiple persistent agents with individual schedules, memory, and task histories. The project, licensed under MIT, is available on GitHub and uses Anthropic's Claude Code as its reasoning engine alongside a managed Chromium browser instance.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Pharo Smalltalk Runs in the Browser via WebAssembly

A project has been shared on Hacker News showing the Pharo programming environment running directly inside a web browser. The implementation uses WebAssembly to execute Pharo's virtual machine client-side. The demo is hosted as a web page on a personal GitHub Pages site. The post drew modest attention, with 4 points and no comments at the time of listing. The source material provides limited detail beyond the link itself.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Outlook Search Missing Emails? Check the Windows Search Index First

Help desk staff often find that Outlook search fails to show emails the user is sure exist, and the usual first step of rebuilding the Outlook profile may be unnecessary. In classic Outlook for Windows, search depends on the Windows Search index, so a paused, stalled, or corrupted index can hide messages that are still in the mailbox. Technicians can check indexing progress under File > Options > Search > Indexing Options, and confirm the WSearch service is running via PowerShell. If the problem persists, rebuilding the index from the Advanced settings is recommended, though it can take hours on large mailboxes. Finally, verifying the cached mail download range and comparing results with Outlook on the web can reveal whether the issue is local.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AML Analysts Lose Capacity When Case Retrieval Is Manual

A DEV Community post frames slow manual retrieval of case information as a major defect in anti-money laundering operations. It argues that analysts lose substantial capacity when they must gather history, links, and background themselves before reviewing an alert. The author describes a common workaround of asking a senior colleague, which fails once that person leaves the organisation. The proposed fix is to retrieve relevant sources before an analyst opens a case, present them transparently, and keep human decision-making in charge. The piece characterises this as a workflow problem rather than a model-accuracy issue.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Acceptance testing a small salon app with fake data across 61 scenarios

Before a real salon used the app, a separate AI session acted as the owner on a test computer with fake data, running 61 scenarios over four rounds. The first round uncovered 19 defects, some serious, which were all fixed, and later rounds came back clean. The scenarios targeted difficult cases such as forced password changes, lockouts after wrong passwords, messy Italian-language spreadsheets, duplicate imports, wrong time zones, data isolation between salons, large customer lists, unreliable networks, and mobile and keyboard use. The report also noted what could not be verified, such as the real booking-software export and WhatsApp messages, and left these for a supervised first session with the owner. The author now runs such an acceptance round before handing over any app, since it catches a different kind of mistake than automated tests do.

0 comments Read more at DEV Community