Claude Code + Security
Posts matching all selected tags.
Category
All Categories
Tags
7 more tagsFewer tags
Newsletter
New posts land in your inbox when they publish. No spam, unsubscribe anytime.
You're in. New posts head your way.
12 posts
Bash allow wildcards match options before subcommands
Bash allow wildcards match options before subcommands. Put the star after git log or git commit. A deny on git push does not close the documented -c hole.
Claude channels from Telegram without granting root
Claude Code channels let Telegram hit a live local session. Launch it in Manual mode, skip-permissions stays off, and deny the git push on the laptop.
A Claude Code dev container is the sandbox you skipped
A claude code dev container puts the CLI in Docker so bash cannot see the host home. Persist login with CLAUDE_CONFIG_DIR, then rebuild and prove isolation.
Claude Cowork vs OpenClaw is a permission model fight
claude cowork vs openclaw is a permission default. Cowork stays in a folder and still asks to delete. OpenClaw ships host exec with ask off. Pick the disk.
Keep auto mode on and still make git push ask
Auto mode git push still prompts if you add an ask rule. Keep auto mode on. The new Auto mode tab is the classifier notebook. Ask is the real checkpoint.
OpenClaw vs Claude is not a coding agent bakeoff
OpenClaw vs Claude is a category error. One is a session with a permission dialog. The other is a host Gateway with ask off. Read the docs before you pick.
Write settings.json without granting git star main
Write Claude Code settings that allow git commit and git log without a star before the subcommand. Restart with no 2.1.246 warning, and git push still asks.
Binance let Claude Code trade and the safety model is a subaccount
Binance Agent OS lets Claude Code trade inside a funded sub-account. Blocked withdrawals are not a max-loss. Size the transfer before you click yes now.
JFrog Boost almost granted rm rf on Always Allow
JFrog Boost almost turned Always Allow into rm rf. After boost init, read the first token on the permission card. Bless ls if you want. Never bless the wrapper.