ZeroBridge
public sourceSystemsHardware-level automation engine and telemetry bridge that turns a Raspberry Pi Zero into a composite USB gadget (Keyboard, Mouse, Media keys, Serial, and Ethernet) for macOS. By interfacing directly at the physical USB layer, it delivers sub-millisecond control, remote lock/wake/unlock, and live host telemetry completely free from macOS accessibility popups and sandbox constraints.
Highlights
- Single-Cable 5-in-1 Composite Gadget: Multiplexes physical USB keyboard, mouse, media keys, CDC-ACM serial, and CDC-ECM Ethernet over a standard USB OTG connection
- Hardware-Level OS Sandbox Bypass: Controls macOS below GUI scripting and accessibility permission layers by interfacing as native plug-and-play USB hardware
- Zero-Knowledge E2EE Architecture: Secures control and telemetry via ephemeral P-256 ECDH key exchange and AES-256-GCM encryption, keeping the Go relay completely blind to payloads
- Biometric Passkey Authentication: Enforces passwordless WebAuthn (Touch ID / Face ID) access control gated by temporary 6-digit setup-code enrollment
- Intelligent Tri-Channel Routing: Combines sub-millisecond WebSockets for window/screen geometry, high-frequency ACM serial for telemetry, and an SSH connection pool with automatic Wi-Fi failover
Stack
- AES-256-GCM
- CDC-ACM / CDC-ECM
- Go
- Linux USB Gadget (ConfigFS)
- P-256 ECDH
- Rust
- Swift
- USB HID
- WebAuthn / Passkeys
- WebSockets
Languages
- Shell 33%
- Rust 30%
- HTML 16%
- Go 15%
- Swift 5%
- JavaScript 0%
Activity
39 commits · updated last month
Components
Systems & Embedded Security
source ↗Hardware-level automation engine and telemetry bridge that turns a Raspberry Pi Zero into a composite USB gadget (Keyboard, Mouse, Media keys, Serial, and Ethernet) for macOS. By interfacing directly at the physical USB layer, it delivers sub-millisecond control, remote lock/wake/unlock, and live host telemetry completely free from macOS accessibility popups and sandbox constraints.
- Rust
- Swift
- Go
- Linux USB Gadget (ConfigFS)
- USB HID
- WebAuthn / Passkeys
- P-256 ECDH
- AES-256-GCM
- WebSockets
- CDC-ACM / CDC-ECM