$ cat /var/log/thoughts/tag/security

Security

Posts tagged with Security.

Filters1

Category

All Categories
All CategoriesBuild AlongDeep DivesMeta AnalysisStrong Opinions

Tags

Security31Developer Tools22AI Coding21Claude Code12Trend Commentary12Cloudflare9CLI7Architecture6MCP5Web Dev5
24 more tags
ML4Open Source4Self-Hosting4DevOps3Git3Mobile3Networking3Productivity3Docker2Python2VS Code2Android1Automation1Claude Desktop1Coding Agents1Containers1Edge Computing1Encryption1JavaScript1Linux1Nginx1OAuth1Samsung1Serverless1
Clear filters

31 posts

Bash allow wildcards match options before subcommands

Bash allow wildcards match options before subcommands. Put the star after git log or git commit. A deny on git push does not close the documented -c hole.

Strong OpinionsClaude CodeAI CodingSecurityDeveloper ToolsCLIGit1 min read · Aug 25, 2026

Claude channels from Telegram without granting root

Claude Code channels let Telegram hit a live local session. Launch it in Manual mode, skip-permissions stays off, and deny the git push on the laptop.

Build AlongClaude CodeAI CodingDeveloper ToolsMCPSecurityCLI1 min read · Aug 25, 2026

A Claude Code dev container is the sandbox you skipped

A claude code dev container puts the CLI in Docker so bash cannot see the host home. Persist login with CLAUDE_CONFIG_DIR, then rebuild and prove isolation.

Build AlongClaude CodeAI CodingDeveloper ToolsCLIDockerVS CodeSecurity1 min read · Aug 25, 2026

Claude Cowork vs OpenClaw is a permission model fight

claude cowork vs openclaw is a permission default. Cowork stays in a folder and still asks to delete. OpenClaw ships host exec with ask off. Pick the disk.

Strong OpinionsClaude DesktopSecurityAI CodingOpen SourceSelf-HostingDeveloper ToolsClaude Code1 min read · Aug 25, 2026

Cloudflare Virtual Wallets are the subaccount for APIs

Cloudflare Virtual Wallets are the API-key subaccount. Claim the handle this week, pick three spending caps, and never hand the Account Wallet to an agent.

Deep DivesCloudflareSecurityDeveloper ToolsAI CodingArchitectureTrend Commentary1 min read · Aug 25, 2026

Keep auto mode on and still make git push ask

Auto mode git push still prompts if you add an ask rule. Keep auto mode on. The new Auto mode tab is the classifier notebook. Ask is the real checkpoint.

Build AlongClaude CodeAI CodingDeveloper ToolsCLIGitSecurity1 min read · Aug 25, 2026

OpenClaw vs Claude is not a coding agent bakeoff

OpenClaw vs Claude is a category error. One is a session with a permission dialog. The other is a host Gateway with ask off. Read the docs before you pick.

Strong OpinionsAI CodingClaude CodeSecurityOpen SourceCoding AgentsSelf-HostingDeveloper Tools1 min read · Aug 25, 2026

Ray CVE made the developer laptop the target

CISA catalogued a Ray CVE because a developer browser can hit local Ray. Patch anything below 2.52.0 and treat the developer laptop as in-scope today.

Deep DivesSecurityPythonOpen SourceMLDeveloper Tools1 min read · Aug 25, 2026

Samsung developer mode best settings skip Auto Blocker

USB debugging is grey because Auto Blocker is on. Follow the samsung developer mode best settings sitting, prove adb devices, then flip the padlock back.

Build AlongAndroidSamsungMobileDeveloper ToolsSecurity1 min read · Aug 25, 2026