展示HN：一个针对摄像头模特的实时警报系统 – 欢迎安全审查
嗨，HN - 我创建了ReadyLive，一个针对直播模特的实时监控和通知系统。
基本想法是：人们常常在房间里等待特定的时刻（私人模式、票务表演、特定目标、特定短语）。ReadyLive监控这些房间，并在触发条件发生时提醒你，这样你就不必一直等待。
我目前最关注的不是增长或功能，而是隐私和安全。
隐私优先的设计
我有意设计这个系统，使其在不放弃个人数据的情况下可用：
- 无广告，无追踪，无与用户相关的分析
- 不需要真实邮箱（虚假邮箱也可以正常使用）
- 没有浏览历史，没有行为档案
- 尽量少存储数据（目标是：即使有人获取了数据库，也没有太多可以学习的内容）
我并不寻求全面审计或免费的工作，而是想知道：我遗漏了哪些明显的安全问题？
如果你在进行类似的威胁建模：
- 在这样的系统中，隐私泄露通常发生在哪里，即使你试图避免存储数据？
- 让用户定义触发条件时，有哪些常见的陷阱（即使有严格的限制）？
- 使用Telegram进行通知是否以人们常常低估的方式改变了威胁模型？
- 你会首先尝试破坏什么？
我希望在复杂性出现之前，尽早检查边界。
链接： [https://readylive.io](https://readylive.io)
如果有任何问题或需要分享更多细节，我很乐意回答。
查看原文
Hi HN - I built ReadyLive, a real-time monitoring + notification system for live cam models.<p>The basic idea: people often sit in rooms waiting for specific moments (private mode, ticket shows, certain goals, certain phrases). ReadyLive watches the rooms and alerts you when your triggers happen, so you don’t have to wait around.<p>What I’m most focused on right now isn’t growth or features, it’s privacy and security.<p>Privacy-first by design<p>I intentionally built this so it’s usable without giving up personal data:
• no ads, no tracking, no analytics tied to users
• you don’t need a real email (fake emails work fine)
• no viewing history, no behavioral profiles
• as little stored data as possible (the goal is: even if someone got the DB, there’s not much to learn)<p>I’m not looking for a full audit or free work, more like: what obvious security problems am I missing?<p>If you were threat-modeling something like this:
• where do privacy leaks usually happen in systems like this, even when you try to avoid storing data?
• any common gotchas with letting users define triggers (even with strict limits)?
• does using Telegram for notifications change the threat model in ways people often underestimate?
• what would you try to break first?<p>I’m trying to sanity-check the boundaries early, before complexity creeps in.<p>Link: <a href="https://readylive.io" rel="nofollow">https://readylive.io</a><p>Happy to answer any questions or share details if that helps.