Sesame: Open-Source Password Manager Stores Vaults Locally Without an Account

·1 views

A developer has released Sesame, an open-source password manager designed with a local-first approach that keeps user vaults on-device by default. No account is required to create or use a vault, and the hosted service never receives vault data. The project is currently in early development at version 0.1.2, with Linux support still in progress. An independent security audit has not yet been completed, and the developer is primarily seeking community feedback, testing, and code review at this stage.

Read the full story at Hacker News

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer releases CLI tool to boot virtual iPhone using Apple's Virtualization framework

A developer known as Lakr233 has published an open-source command-line tool called vphone-cli on GitHub. The tool leverages Apple's native Virtualization.framework to boot a virtual iPhone environment on compatible Apple hardware. The project was shared on Hacker News, where it attracted initial community attention. vphone-cli offers developers a way to run a virtualized iPhone instance directly from the terminal without additional third-party virtualization software.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Hybrid Search with RRF Fixes Blind Spots in RAG Retrieval Pipelines

Production RAG systems that rely solely on vector search often fail to retrieve exact matches for error codes, product IDs, or other precise identifiers, while pure keyword search (BM25) breaks down when users paraphrase queries. Running both BM25 and dense vector search in parallel, then merging results using Reciprocal Rank Fusion (RRF), addresses both failure modes simultaneously. RRF ranks documents by their relative position across both result lists rather than trying to normalize their incompatible raw scores, using a smoothing constant typically set to 60. A minimal Python implementation combining BM25Okapi, SentenceTransformers, and RRF can be built in under 25 lines of code. This hybrid approach improves retrieval reliability and, in turn, the quality of responses generated by downstream language models.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Flask on macOS Port 5000 Fails in Safari and How to Fix It

Developers running a Flask app on macOS may find that navigating to http://localhost:5000 in Safari returns nothing instead of their app. This happens because macOS resolves 'localhost' to the IPv6 address ::1 rather than the IPv4 address 127.0.0.1, a preference driven by the OS favouring modern IPv6. Apple's AirPlay service happens to occupy port 5000 on the IPv6 loopback address ::1, effectively intercepting the request before it reaches Flask. Flask's built-in development server, by default, binds only to 127.0.0.1 — the IPv4 loopback — not to ::1. Entering 127.0.0.1:5000 directly into the browser bypasses the conflict and successfully reaches the Flask application.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

OpenAI and 100+ Groups Warn AI-Enabled Cyberattacks Are Outpacing Defenses

The New York Times published a newsletter highlighting a warning from OpenAI and over 100 organizations that the window to defend against AI-driven cyberattacks is rapidly closing. The central concern is that AI-powered attacks are becoming cheaper to execute while growing harder to contain or remediate. Security experts stress that defenders must accelerate their response capabilities to keep pace with increasingly sophisticated threat actors. The development has prompted cybersecurity practitioners and developers to reassess and deepen their preparedness strategies.

0 comments Read more at DEV Community