In this video CJ explains basic secure code isolation concepts and shows tools you can use to limit the blast radius of infected codebases.

00:00 - Intro
02:03 - The Blast Radius
02:59 - Security Concept 1: Principle of Least Privilege
03:27 - Security Concept 2: Egress Filtering
04:06 - Security Concept 3: Ephemeral Environments
04:21 - Securty Concept 4: Defense in Depth
04:52 - Containerization
05:51 - Dev Containers
06:32 - Virtual Machines
07:11 - GUI VM Apps
07:57 - Docker sandbox
08:28 - Lima / Colima
08:46 - Full Seperation - VPS / Cloud Environments
09:42 - Github Codespaces / coder.com
10:08 - Paranoid
10:20 - Seperate Development Laptop
10:46 - Live OS
11:24 - Air Gapped Development
11:54 - Recap

pv: https://www.ivarch.com/programs/pv.shtml

• $ whoami
  Yo what's up everyone my name's dave and you suck at programming! Connect with me on my socials below and if you're reading this you're legally required to subscribe to my channel.