Sunder: A Rust-Based Local Privacy Firewall for LLMs
Sunder is a local privacy firewall for AI chat interfaces, designed to run as a Chrome extension. This tool, created using Rust and compiled to WebAssembly, intercepts your input before it's sent over the network, stripping out sensitive information like emails, transaction IDs, and more. Sunder operates under a zero-trust model, assuming all providers may store your data, thereby preemptively anonymizing it by replacing sensitive information with tokens.
Key Details
- Privacy Model: Uses a zero-trust approach to ensure data protection, replacing sensitive information such as
[email protected]with[EMAIL_1]before sending it to an LLM. - Local Operations: All actions are performed locally in your browser using Rust compiled to WebAssembly, ensuring no network calls are made for privacy processing.
- Extension Framework: Built on the Plasmo framework, a React-based Chrome extension platform.
- Storage: Features a 100% local in-memory "Identity Vault" for secure data handling.
- Compatibility: Currently supports ChatGPT, Claude, Gemini, Perplexity, DeepSeek, and Copilot. Additionally, there's support for a local dashboard with Ollama, enabling full air-gap operation.
Sunder is suitable for anyone concerned with maintaining privacy when using AI services by keeping sensitive data local and ensuring AI models work with anonymized inputs.
📖 Read the full source: r/LocalLLaMA
👀 See Also
Google TIG Reports First AI-Generated Zero-Day Exploit in the Wild
Google Threat Intelligence Group has identified a threat actor using a zero-day exploit believed to be developed with AI, marking the first observed offensive use of AI for zero-day vulnerability exploitation.
Endo Familiar: Object-Capability Sandbox for AI Agents
Endo Familiar implements object-capability security for AI agents: agents start with zero ambient authority, receive only explicit references to specific files or directories, and can derive narrower capabilities in sandboxed code.
Cloak tool replaces chat passwords with self-destructing links for OpenClaw agents
Cloak is an open source tool that replaces passwords shared in chat with OpenClaw agents with self-destructing links. Each link can only be opened once, then the password disappears, preventing passwords from accumulating in chat histories.
Claude Code Identifies Malware Backdoor in GitHub Repo During Technical Audit
A developer used Claude Code to audit a GitHub repository before execution and discovered a remote code execution backdoor in src/server/routes/auth.js that would have compromised their machine. The prompt requested a technical due diligence audit checking project completeness, AI/ML layer, database, authentication, backend services, frontend, code quality, and effort estimate.