HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
trailofbits
algo
Python2016–2025
trailofbits / algo

algo

Set up a personal VPN in the cloud

138Distinct people
198Mentions
2Explicit recommenders
30.5KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Set up a personal VPN in the cloud

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

If your intention is to build a secure IPSEC VPN, Algo is highly recommended [0] [0] https://github.com/trailofbits/algo

subliminalpanda used a recommendation phrase. 2 indexed comments match. This is a phrase match, not a verdict.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

Mentioned in the same Hacker News threads. That is not proof they are substitutes.

This week on Hacker News

Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 6:59:22 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year198 dated mentions

Observed mentions: 2016-11-26 05:02:56 UTC to 2025-12-16 05:30:34 UTC.

010203040502016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 7 mentions; 3 submissions, 4 comments20162017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 50 mentions; 2 submissions, 48 comments2018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 42 mentions; 3 submissions, 39 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 50 mentions; 1 submissions, 49 comments2020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 17 mentions; 2 submissions, 15 comments20202021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 7 mentions; 0 submissions, 7 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 13 mentions; 1 submissions, 12 comments2023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 7 mentions; 2 submissions, 5 comments2024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 4 mentions; 2 submissions, 2 comments2025

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC734
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC50248
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC42339
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC50149
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC17215
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC707
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC13112
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC725
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC101
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC422

What Hacker News says

13 sources
"We have to throw away the entire business and product and rebuild it in a model where our old thing is impossible" is a tough sell to a boardroom, obviously. I mean, there is a model that works, it's Discord. Small self-associating groups from various parts of our lives. TBH that's so far ahead of facebook - humans draw meaning from being in groups where there groups are small enough to know and have repeat interactions with people. You all know bigger discords you're in (gpu drop discord lol) where you're just a face in the sea and it's much harder to maintain meaningful relationships in a place like that, fediverse would be like that too. Humans evolved for smaller group sizes and a group of like 30 or 50 active users is EXCELLENT for social media, Discord nails this perfectly, personal communication breaks down at like 75-100 acti
Read the rest
ve users tops. Facebook is an ocean and it's unstructured (Google Plus or whatever had user grouping, which was an advancement imo - you can say "that's a work person" and interact with them in certain ways) unless you go out of your way to set it up like that. Discord really just works amazingly well for that, I have tons of hobby groups and game groups where I've known people for a super long time and friend groups from whatever community. Kids have the "school chat discords" and if I was in college we'd have had study groups on it I'm sure, we had FB groups then. No reason you can't have a "family discord" too (so uncool, mom!). Mastodon basically is (or could be) that as a protocol, if you want to treat it like that. Dress it up in a discord-like client and get it onto phones/etc and make the user-story good. People already show they'll pay to self-host discord servers etc, so come up with a cool "Algo" style ansible deployment thingy that makes it super simple, just fires up a server on an AWS account for you and gives you a link you can send to your friends etc. Congrats, you are now the Underwater Basketweaving Enthusiasts Discord Server, here's a random (or generated human-meaningful) link. Not everybody needs to run a server, but, make it easy enough that people can do it. And as a user, just join the discords you like and let the server op run it/mod it, just like now. https://github.com/trailofbits/algo What exactly does Twitter do in this business model, though, lol? And how do you get there? Twitter's "broadcast" model is nothing at all like that. I guess they're gonna... throw it all away and start fresh? Seems like that's what's happening I guess. But I guess I just don't see the value in federation generally, to the end user. Pods aren't authoritative, they're decentralized and human-meaningful (in Zooko's Triangle), so oauth type stuff doesn't really matter, I would never want to "auth against UnderwaterBasketweaving" or whatever, because it's trivial to spin up another instance and make fake users etc. And why would I want to "cross the streams" between my home and work pods, or let Wendys marketing come and mine/advertise my server, etc, if I'm the one running it? Am I paying for wendys to scrape my content? Consistent cross-discord-instance identity is all I really want from social media, at most and that doesn't need to be tied to this at all, you can do that via google auth or some other idp(s) that solves that problem. Where is the revenue stream in this at all? I don't want "community moderation service" in my decentralized communities... there are places where "work moderation" would pitch a fit and some places where work protocol would be incredibly uncool. But with small communities, O(1) moderation works fine, you don't need it, just let the discord server op do discord mod shit and delegate roles/etc to other mods too. Yes, godmode is fine in self-organizing communities because if moderation drifts sufficiently far from group norms the community will reorganize without you. Crossing the streams also ruins that, it means you have to moderate the firehose or punt it to an authority who will, and it's all just a big "why" when discord mods are fine. Similarly, want a feed of interesting content? We had an app for that, it was called "mee6 bot", and the server admin asks what twitters/youtubes/etc people want for certain channels. You want a new channel? Ask for it, or make it. I am on a server with 30-ish active members and everyone has basic "add channel/rename/reorder/etc" and "warn" punishments etc, it's fine. If you're constantly being a dick you'd get kicked out but it's never been a problem. Family discord, or work discord, or some other close-knit irl community? just let people do things. social ostracism will keep people in line with the norms, people mostly don't like losing friends. (maybe disk quotas though, because that is one that will add up faster than users realize. Nobody has solved "free content service" without it being tethered to another business, like youtube or imgur or discord. no, I am not interested in your IPFS childporncoin either. give me a sustainable, "local" method for hosting content... like requiring users to host content themselves on an instance or server hosts providing user-quotas for hosting etc. Define how important you consider your content (indefinite, 30 days, etc) and refuse new uploads if they're past quota.) And if you just want a service where you click it and it runs in a hosted instance by a cloud provider... well, discord exists, and dropbox remains popular even in a world of NASs, etc. But none of that has anything to do with Twitter or will have anything to do with Twitter, lol.
In Twitter to employees: all office buildings closed, badge access suspended
I think something that relates to the pain of onboarding with unique configurations for core tools used by developers would be useful. To be specific I wish I didn't have to forward a developer to an already obsolete wiki page then nod and smile as they complain/tussle with the experience/vernacular/context of a document that has no owner. I think this is a bigger problem (which could be mine and mine alone as everyone seems to really like wikis) but I think being able to seed the developer environment with all the tooling config could help stave off (some of) this pain. So my thoughts: a simple cli related flow gen tool which could generate this interactively. (And could also verify correctness) Tools that I can think of from the top of my head that need to be configured to handle user config and private repo location(s) are git, docke
Read the rest
r and mvn/gradle/npm (etc, I figure all package management tools usually need this). I like the way https://github.com/trailofbits/algo Works to collect configuration in this respect (Using ansible) as well as how eslint does it (I think using https://github.com/gkz/optionator) For setting up base config in the cli. Anyway hope this helps seed an idea or at least might identify a problem (not sure how lucrative it would be though)
In Ask HN: What developer tools would you like to see?
Just curious: Any practical difference between Algo [0] and PiVPN [1] from someone that has tested them? Both seem to support Wireguard. [0]: https://github.com/trailofbits/algo [1]: https://pivpn.io/ I just learned about Algo but have been a long time user of PiVPN (from when they only supported OpenVPN!) on my Raspberry Pi, so in the case that I wanted to reinstall the server, I wonder if the change would bring something new to the table.
In Ask HN: Is Public WiFi Dangerous?
Your intuition is correct. The exception is that DNS will, by-default, be sent to the default router DNS servers, which might monitor/track what you do (most ISPs run DNS that do this too), and unencrypted HTTP. Unencrypted HTTP is more and more rare as time goes on. Most of the "shame on public WiFi" comes from VPN companies, which are just trying to fearmonger into a sale. Sure, DNS over HTTPs isn't as widespread as it should be. Sure, some websites aren't encrypted, still. But that doesn't mean that routing all of your insecure traffic to a VPN provider so they can handle it instead is going to increase your security. It just moves the threat model from "your public WiFi network and people on it" to the VPN provider. If you really want to be safe, you could run your own VPN with algo (https://github.com/trailofbits/algo) or manually se
Read the rest
tup WireGuard and route traffic e.g., back to your home ISP, instead. That's probably my best suggestion, rather than using any of the cliche VPN providers that advertise everywhere.
In Ask HN: Is Public WiFi Dangerous?
I agree. I was struggling with this many years ago. And I was concerned about the security and privacy of VPN providers. Eventually, I ended up spinning my own VPN with Algo [0] like four years ago and it worked really well for me for these years. I use VMs in Hong Kong for connection speed, and use VMs in California for country specific stuff (ADs and news for Hong Kong are super annoying XD). [0] https://github.com/trailofbits/algo
In Poll: Where do you live?

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.