AI Coding + Security
Posts matching all selected tags.
Category
All Categories
Tags
14 more tagsFewer tags
Newsletter
New posts land in your inbox when they publish. No spam, unsubscribe anytime.
You're in. New posts head your way.
Filters2
Category
All Categories
Tags
14 more tagsFewer tags
21 posts

Bash allow wildcards match options before subcommands
Bash allow wildcards match options before subcommands. Put the star after git log or git commit. A deny on git push does not close the documented -c hole.

Claude channels from Telegram without granting root
Claude Code channels let Telegram hit a live local session. Launch it in Manual mode, skip-permissions stays off, and deny the git push on the laptop.

A Claude Code dev container is the sandbox you skipped
A claude code dev container puts the CLI in Docker so bash cannot see the host home. Persist login with CLAUDE_CONFIG_DIR, then rebuild and prove isolation.

Claude Cowork vs OpenClaw is a permission model fight
claude cowork vs openclaw is a permission default. Cowork stays in a folder and still asks to delete. OpenClaw ships host exec with ask off. Pick the disk.

Cloudflare Virtual Wallets are the subaccount for APIs
Cloudflare Virtual Wallets are the API-key subaccount. Claim the handle this week, pick three spending caps, and never hand the Account Wallet to an agent.

Keep auto mode on and still make git push ask
Auto mode git push still prompts if you add an ask rule. Keep auto mode on. The new Auto mode tab is the classifier notebook. Ask is the real checkpoint.

OpenClaw vs Claude is not a coding agent bakeoff
OpenClaw vs Claude is a category error. One is a session with a permission dialog. The other is a host Gateway with ask off. Read the docs before you pick.

VS Code assisted approvals let the model skip the prompt
Turn on VS Code assisted approvals so Copilot skips low-risk tool prompts on long tasks. Pin Copilot on the agent host, pick Assisted, keep a hard ask.

Write settings.json without granting git star main
Write Claude Code settings that allow git commit and git log without a star before the subcommand. Restart with no 2.1.246 warning, and git push still asks.