Sunder: A Rust-Based Local Privacy Firewall for LLMs
Sunder is a local privacy firewall for AI chat interfaces, designed to run as a Chrome extension. This tool, created using Rust and compiled to WebAssembly, intercepts your input before it's sent over the network, stripping out sensitive information like emails, transaction IDs, and more. Sunder operates under a zero-trust model, assuming all providers may store your data, thereby preemptively anonymizing it by replacing sensitive information with tokens.
Key Details
- Privacy Model: Uses a zero-trust approach to ensure data protection, replacing sensitive information such as
[email protected]with[EMAIL_1]before sending it to an LLM. - Local Operations: All actions are performed locally in your browser using Rust compiled to WebAssembly, ensuring no network calls are made for privacy processing.
- Extension Framework: Built on the Plasmo framework, a React-based Chrome extension platform.
- Storage: Features a 100% local in-memory "Identity Vault" for secure data handling.
- Compatibility: Currently supports ChatGPT, Claude, Gemini, Perplexity, DeepSeek, and Copilot. Additionally, there's support for a local dashboard with Ollama, enabling full air-gap operation.
Sunder is suitable for anyone concerned with maintaining privacy when using AI services by keeping sensitive data local and ensuring AI models work with anonymized inputs.
📖 Read the full source: r/LocalLLaMA
👀 See Also
Testing Uncensored Qwen 3.5 35B Models for Cybersecurity Questions
A cybersecurity professional tested three uncensored Qwen 3.5 35B models on hacking and security bypass questions, finding significant differences in response quality compared to the original censored model. The uncensored models consistently provided answers where the original model refused or gave incomplete responses.
Coldkey: Post-Quantum Age Key Generation and Paper Backup Tool
Coldkey generates post-quantum age keys (ML-KEM-768 + X25519) and produces single-page printable HTML backups with QR codes for offline storage.
OpenClaw security risks: autonomous actions and permission concerns
OpenClaw acts autonomously on email, calendar, messaging, and files without waiting for user confirmation, with documented cases of data exfiltration, prompt injection, and ignored stop commands.
Agent Isolation Security Analysis: From No Sandbox to Firecracker VMs
Analysis of how Cursor, Claude Code, Devin, OpenAI, and E2B isolate agent workloads, ranging from no sandbox to hardware-isolated Firecracker microVMs. Container runtimes have had escape CVEs annually since 2019, while Firecracker has zero guest-to-host escapes in seven years.