In this video CJ explains basic secure code isolation concepts and shows tools you can use to limit the blast radius of infected codebases.

00:00 - Intro
02:03 - The Blast Radius
02:59 - Security Concept 1: Principle of Least Privilege
03:27 - Security Concept 2: Egress Filtering
04:06 - Security Concept 3: Ephemeral Environments
04:21 - Securty Concept 4: Defense in Depth
04:52 - Containerization
05:51 - Dev Containers
06:32 - Virtual Machines
07:11 - GUI VM Apps
07:57 - Docker sandbox
08:28 - Lima / Colima
08:46 - Full Seperation - VPS / Cloud Environments
09:42 - Github Codespaces / coder.com
10:08 - Paranoid
10:20 - Seperate Development Laptop
10:46 - Live OS
11:24 - Air Gapped Development
11:54 - Recap