IT Security (MoC) - DeveloPassion

# IT Security (MoC) ## Overview ## Notes   - [[2026-05-14 Obsidian Sync Passes Cure53 and Trail of Bits Audits]] - [[2026-07-29 OpenAI Open-Sourced Its Security Scanner]] - [[2026-08-21 GitHub Copilot gets sandboxing - local via MXC, cloud via ephemeral VMs]] - [[2026-10-04 OWASP MCP Security Taxonomy - a common language for MCP risks, still at v0.1]] - [[2FAS]] - [[ADMX Viewer]] - [[AgentBox]] - [[Alpine Linux]] - [[Attack surface]] - [[Attack vectors]] - [[Authorization best practices (Article)]] - [[Automate the validation of the correspondence between the ID in the request URL (if present) and the ID in the payload]] - [[Bramble]] - [[Bring Your Own Key (BYOK)]] - [[Claude Code Security Guidance Plugin]] - [[Claude Code Security Review]] - [[Cloudflare Access and Zero Trust]] - [[Cloudflare Dynamic Workers]] - [[Cloudflare Mesh]] - [[Cloudflare Sandbox SDK]] - [[Cloudflare Tunnel]] - [[Cloudflare WAF]] - [[Codex Security]] - [[Codex Security plugin]] - [[Craig McLuckie]] - [[Cryptomator]] - [[Data classification]] - [[Data Security]] - [[Dependency Confusion]] - [[Deploying TLS certificates for local development and production using Kubernetes, cert-manager, mkcert and Let’s Encrypt (Article)]] - [[DevSecOps]] - [[DNS Collector]] - [[DrSkill]] - [[Fail2Ban]] - [[Firecracker]] - [[Firewall]] - [[Fort (Firewall)]] - [[frizbee (CLI)]] - [[Ghidra]] - [[GitHub Copilot Managed Settings]] - [[GitHub Copilot MCP Registry]] - [[GitHub Copilot Sandboxing]] - [[GitHub Enterprise Cloud with Data Residency (GHE.com)]] - [[gVisor]] - [[How to Connect OpenClaw to Chrome via Tailscale (Article)]] - [[How to Self-Host OpenClaw Securely on a VPS (Article)]] - [[How to use a proxy to bypass firewalls in corporate environments (Article)]] - [[Input validation with NestJS (Article)]] - [[Kata Containers]] - [[Laravel Fortify]] - [[Laravel Socialite]] - [[Least Privilege Principle]] - [[Lethal Trifecta for AI Agents]] - [[Microsoft AI Agent Governance Toolkit]] - [[Microsoft eXecution Container (MXC)]] - [[microVM]] - [[Mulder effect]] - [[Namesquatting]] - [[NetBird]] - [[NVIDIA SkillSpector]] - [[Obsidian Restricted Mode]] - [[OpenSandbox Credential Vault]] - [[Opt for simpler security controls over complex ones]] - [[OWASP MCP Security Taxonomy]] - [[Package Registry Security]] - [[Privileged Information Management (PIM)]] - [[Prompt injection]] - [[Promptfoo]] - [[Proton]] - [[Proton Drive]] - [[Proton Mail]] - [[Proton Pass]] - [[Proton VPN]] - [[REA (Reverse Engineer Anything)]] - [[Scully effect]] - [[Secret Operations (SOPS)]] - [[Secure Copy Protocol (SCP)]] - [[Secure Shell (SSH)]] - [[Simplewall (Firewall)]] - [[Slopsquatting]] - [[Slopsquatting, Typosquatting, and the New Software Supply Chain Attacks - How AI and Vibe Coding Are Making Package Registries Even More Dangerous (Article)]] - [[Software Composition Analysis (SCA)]] - [[Software Development Concepts e-book collection (Article)]] - [[Software Supply Chain Security]] - [[Starjacking]] - [[Static Application Security Testing (SAST)]] - [[Tailcat]] - [[Tailscale]] - [[The Reasons I'll Never Switch from Obsidian to Tana (Article)]] - [[treg]] - [[Triple Sec]] - [[Typosquatting]] - [[Uncomplicated Firewall (UFW)]] - [[varlock]] - [[Vercel DeepSec]] - [[ViewDNS]] - [[Virtual Private Network (VPN)]] - [[Warden]] - [[Warden CLI]] - [[Windows Sandbox]] - [[WireGuard]] - [[Zero Trust Security]] - [[ZeroTier]]  ## Quotes   - [[At best, an air gap is a high-latency connection]] - [[If you let your AI agents use skills you have not read, it's exactly like running unknown programs as root, but with potentially much worse risks]] - [[It's not because a client is authenticated (i.e., you know who they are) that they can do anything they fancy]]