HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
spr-networks
super
JavaScript2023–2026
spr-networks / super

super

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

Systems & InfrastructureSecurity & PrivacySelf-hostedObservabilityNetworking
Explore on GitHubRead Hacker News discussions
5Distinct people
14Mentions
0Explicit recommenders
902GitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year14 dated mentions

Observed mentions: 2023-04-15 20:58:20 UTC to 2026-02-26 18:20:03 UTC.

02462023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 6 mentions; 2 submissions, 4 comments20232024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 7 mentions; 1 submissions, 6 comments20242025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2026-01-01 00:00:00 UTC to 2027-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments. Incomplete calendar period.2026*

* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC624
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC716
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC000
2026 (partial)2026-01-01 00:00:00 UTC2027-01-01 00:00:00 UTC101

What Hacker News says

14 sources
supernetworks·Feb 26, 2026
Hostapd now has support for multi pass SAE /WPA3 password as well. We have an implementation of dynamic VLAN+per device PSK with WPA3 (https://github.com/spr-networks/super) we've been using for a few years now. Ironically one of the main pain points is Apple. keychain sync means all the apple devices on the same sync account should share a password for wireless. Secondly the MAC randomization timeouts require reassignment. The trouble with SAE per device passwords is that the commit makes it difficult to evaluate more than one password per pairing without knowing the identity of a device (the MAC) a-priori, which is why it's harder to find this deployed in production. It's possible for an AP to cycle through a few attempts but not many, whereas in WPA2 an AP could rotate through all the passwords without a commit. The standard needs to a
Read the rest
dapt.
In AirSnitch: Demystifying and breaking client isolation in Wi-Fi networks [pdf]
spr-alex·May 27, 2024
I work at Supernetworks where we're building secure by default Wi-Fi routers. Our software had the ability to assign MACs to interfaces for a little while now, and as a response to this study we've now also added MAC randomization, now in the dev branch, and generally available in our next release (https://github.com/spr-networks/super). Many cards which support WDS//AP-VLAN have no trouble with updating the BSSID. For use as a travel router the UI makes it simple to randomize both the AP BSSID/MAC as well as interfaces working as WiFi client stations for internet uplink.
In Surveilling the masses with wi-fi-based positioning systems
spr-alex·Jan 5, 2024
Somewhat related -- with the project I work on, https://github.com/spr-networks/super, we do support wireguard peers (and also support combining that wireguard identity with a wifi peer identity as well). Devices are provisioned by assigning or generating a wireguard keypair in the API. Next the peers are routed together by policy and by default can't access one another. There's support for bidirectional network groups or one-way firewall rules with NAT. One area of improvement is multicast support with wireguard, it's doable, just not ready yet.
In WPA3 Enterprise 192-bit mode at home
transpute·Dec 29, 2023
Wi-Fi 7 access point firmware vendors could choose to implement optional per-client passphrases, VLANs and device identity for access and traffic control. OSS reference code is available from https://github.com/spr-networks/super. Wi-Fi 7 Sensing (802.11bf) of humans can measure breathing rate, keystroke typing, position and motion, from outside the walls of homes and business. What's the relationship between human biometric recognition and security?
In Wi-Fi 7 Signals the Industry's New Priority: Stability
transpute·Nov 25, 2023
golang-based SPR is open-source and can run on RPi: https://github.com/spr-networks/super > An unspoofable device identity is established with a MAC address and Per-Device Passphrase for WiFi (or a VPN Public Key for Remote Devices). From there, each device gets its own /30 subnet to exist on. Hardening and strict firewall rules block network spoofing and impersonation, and routing rules redefine connectivity between devices and to the internet.
In Securely Chaining WiFi Routers (2022)
spr-alex·May 18, 2023Submission

Show HN: Supernetworks' Secure Programmable Router

Hey HN, We recently saw that a bad router update made it to the front page, and thought you might like to hear about what we're building at Supernetworks. Our flagship product is a Secure Programmable Router (SPR), which is Linux-based software for running a hardened wifi network that enables easy addition and management of devices. SPR isolates each device into an individual VLAN and securely connects it to the rest of the network. What sets SPR apart is that we've engineered it to use the latest and greatest networking capabilities of Linux, all while employing best-in-class security practices and modern coding standards. SPR is designed to run in docker containers on systems with a bit more memory and storage, which opens up possibilities like hosting voice assistants, security testing tools, and media servers. We have built SPR mostly
Read the rest
with golang and a react frontend, championing these languages especially for their robust security and memory-safety. Here's an overview of its key features: - Device Isolation: SPR ensures each WiFi device has its own VLAN and subnet. This makes network attacks like ARP/MAC spoofing a non-issue and protects devices from traffic sniffing. Notably, SPR was not affected by the MACStealer flaws [1] - Per-device passwords. The passphrase and MAC address combine to give each device a unique identity in the network. No custom code is required on clients and a wide variety of IOT devices are compatible. By the way, we do support WPA3 with multi-psk, and we were the first and might still be the only one that supports this. - Groups and Tags: Assign devices to groups to control their network access. Apply tags for special features and further organization - Privacy Preserved: Your data is only your data. SPR doesn’t send any telemetry or statistics to Supernetworks or any third party (beyond what Github might collect when downloading our containers and code). You can verify this by checking the code in our GitHub repo or inspecting the network traffic from SPR. Part of our product's motivation is to provide better capabilities to block telemetry going to all sorts of parties, using DNS block lists and firewall rules. - Extensible: SPR supports plugins running as docker containers, allowing a multitude of ways for customization and enhancement. It also has an API for programming the router directly. - Wireguard: SPR can run as a VPN host as well, and can be hosted as a router in the cloud or locally without WiFi for this purpose. Some more useful links for the project: Our Github page: http://github.com/spr-networks/super FAQ: https://www.supernetworks.org/pages/docs/faq Find us on Twitter: https://twitter.com/spr_networks Demo page: https://demo.supernetworks.org/ Join the Discord chat: https://discord.gg/EUjTKJPPAX Our API Docs: https://www.supernetworks.org/pages/api/0 Documentation Home: https://www.supernetworks.org/pages/docs/intro/ Raspberry Pi 4 Setup: https://www.supernetworks.org/pages/docs/pi4b General Setup Guide: https://www.supernetworks.org/pages/docs/setup_run_spr Check us out at https://www.supernetworks.org and let us know what you think! We’re open to feedback, suggestions, feature requests, and questions. Thank you! [1] https://news.ycombinator.com/item?id=35582798
5 points · Open discussion

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.