Skip to main content

Localhost Security

Your development machine is a high-value target. It has access to your code, your credentials, your cloud accounts, and often production databases. Treating it casually is a security risk.
This section is a work in progress. Content is being actively developed.

Topics to Be Covered

  • Exposed ports and local services
  • .env files and local secrets management
  • SSH key management
  • Browser extension risks
  • npm/pip/package manager supply chain attacks
  • Dev container and sandbox isolation
  • Network exposure (coffee shop coding)
  • AI tool permissions and access scope
  • Git credential management