every developer should know this

In this video CJ explains basic secure code isolation concepts and shows tools you can use to limit the blast radius of infected codebases. 00:00 - Intro 02:03 - The Blast Radius 02:59 - Security Concept 1: Principle of Least Privilege 03:27 - Security Concept 2: Egress Filtering 04:06 - Security Concept 3: Ephemeral Environments 04:21 - Securty Concept 4: Defense in Depth 04:52 - Containerization 05:51 - Dev Containers 06:32 - Virtual Machines 07:11 - GUI VM Apps 07:57 - Docker sandbox 08:28 - Lima / Colima 08:46 - Full Seperation - VPS / Cloud Environments 09:42 - Github Codespaces / coder.com 10:08 - Paranoid 10:20 - Seperate Development Laptop 10:46 - Live OS 11:24 - Air Gapped Development 11:54 - Recap Egress Filtering | https://en.wikipedia.org/wiki/Egress_filtering Defense In Depth | https://en.wikipedia.org/wiki/Defense_in_depth_(computing) Containerization | https://en.wikipedia.org/wiki/Containerization_(computing) Docker Getting Started | https://docs.docker.com/get-started/ Dev Containers | https://containers.dev/ Virtual Machine | https://en.wikipedia.org/wiki/Virtual_machine Virtual Box | https://www.virtualbox.org/ UTM | https://mac.getutm.app/ VMware | https://www.vmware.com/ Docker Sandboxes | https://docs.docker.com/ai/sandboxes/ Lima | https://lima-vm.io/ Colima | https://colima.run/ VPS | https://en.wikipedia.org/wiki/Virtual_private_server Github Codespaces | https://github.com/features/codespaces Coder | https://coder.com/ Live OS | https://en.wikipedia.org/wiki/Live_CD Air Gap | https://en.wikipedia.org/wiki/Air_gap_(networking) Fansmitter: Acoustic data exfiltration from air-Gapped computers via fans noise | https://www.sciencedirect.com/science/article/abs/pii/S0167404820300080 AirKeyLogger: Hardwareless Air-Gap Keylogging Attack | https://www.computer.org/csdl/proceedings-article/compsac/2023/269700a637/1PhCRSujeBa ------------------------------------------------------------------------------ Hit us up on Socials! Syntax: https://x.com/syntaxfm Scott: https://x.com/stolinski Wes: https://x.com/wesbos CJ: https://x.com/CodingGarden Randy: https://www.youtube.com/@randyrektor http://www.syntax.fm Brought to you by https://sentry.io/syntax #programming #coding #devops #isolation #webdeveloper #javascript #syntax #syntaxfm #webdev