← /daily-startup-idea
August 2, 2026

Chmod

“chmod for your life. Your default umask is 0022— everyone can read your Instagram, your Venmo, your BeReals from 2023. Fine at 22. At 34, with a job and a wedding coming up, you’d like your uncle to drop to 0700 and that guy you dated in college to get chmod 000. Our daemon rewrites permissions across every app you own. Enterprise: sticky bits on your close friend group so nobody who marries in can accidentally get exec.”

The Problem

You have 487 friends on 11 platforms and identical permissions on all of them. Your boss can see the photo of you asleep in a hammock at brunch. Your ex knows you moved. Your mother has read receipts on. Somewhere, an ex-coworker just liked your 2014 tweet. Yourumask was set once, in the eighth grade, and has not been touched since.

tty1 · ~/social◼ world-writable
$ ls -la ~/social
-rwxrwxrwx 1 you world instagram.dm
-rwxrwxrwx 1 you world venmo.public
-rwxrwxrwx 1 you world location.live
-rwxrwxrwx 1 you world spotify.now-playing
-rwxrwxrwx 1 you world linkedin.status
$ umask
0022 (inherited from 2011)
[warn] 487 entities have rwx on you. Recommended: chmod -R 0700 ~/ and cry once.

The Solution

A universal chmoddaemon that walks every app, every follower list, every “close friends” circle, and applies real Unix permission bits. read means they see your posts. write means they can DM you. execute means they can call unannounced. Toggle bits with a swipe.

the bit matrix
read
write
exec
user
you
sees own posts (obviously)
can DM self at 2am
self-talks in the shower
group
close friends
close-friends story
text without ‘u up?’ guilt
walk in unannounced
other
the world
public grid
DMs open
phone rings on Sunday
recommended: rwxrwxr-- · a.k.a. 0774· a.k.a. “i love you but leave me alone until Tuesday”

The Access Matrix

ACL · ~/social · effective487 principals · 11 zones
Momrwx700she called anyway. execute bit is theoretical.
Best friendrwx770sticky bit set. cannot be delegated to a new spouse.
Work Slackrw-660no exec. do not call me at 8:47pm about the deck.
That college ex---000blocked in 2019. still shows up in People You May Know.
The baristar--400read-only. knows your order. respects the boundary.
Weird uncler--444downgraded from rwx after last Christmas.
LinkedIn recruiters-w-020write-only. inbox is /dev/null.

Special Bits

SETUID
Any interaction with them runs as them. When your mom drops off leftovers, they show up in your fridge with her permissions. Even you can’t throw them out.
SETGID
New members of your friend group inherit the group’s permissions. Your best friend’s new boyfriend gets r-- until the two-year mark, automatically.
STICKY
On /friends/close, only the owner (you) can unlink members. Nobody can “steal” a friend by getting married to them first.

Pricing

READ-ONLY
$0
We show you your current permissions. You gasp. You close the tab. Nothing changes. You now know.
PERSONAL
$14 / mo
Full chmod -R across 11 platforms. Weekly permission-drift alerts (“your ex viewed your story”). Umask tuning.
ENTERPRISE
$14,400 / yr
ACLs, POSIX capabilities, and a full audit log. On-call SRE will chmod your uncle to 0000 before Thanksgiving. Includes one (1) restraining order template.

TAM

addressable market · adults with more than one follower they regret
2.9B adults × 73 world-writable relationships × $0.11 / bit / yr
= $23.3B / yr in bad permissions
Methodology: we ran ls -la on our head of product. He put his laptop down and stared out a window for 40 minutes.

The Ask

$5M seed. 40% to the ACL crawler that has to write a different scraper for each of 11 platforms because none of them expose a real permissions API. 30% to the octal-to-vibes translator: users cannot memorize that 0644 means “followers can read, only I can write.” 20% to legal, because auto-blocking someone’s uncle via chmod is, apparently, “a product decision, not a systems decision.” 10% to a lobby sign that reads UMASK 0077 · NOT EVERY FILE NEEDS TO BE WORLD-READABLE.

Series A pitch: “We’re Okta, but the users are your feelings and the resource is your Instagram.”