… Related I made my own encrypted tunnels with NodePass because I don't trust Cloudflare I don't trust anyone with my data security, really Who do you trust? …
… Your users trusted you enough to hand over their data. Sending it all back to me, unprompted, is a spectacular way to break that trust. Every vibe coded app I find is a security nightmare. …
… This will matter Just not yet None of this means the security concerns regarding allegations of Chinese state-sponsored hacking are overblown. …
… OpenClaw's own documentation describes its security model as "personal assistant," meaning one trusted operator with potentially many agents, not a "shared multi-tenant bus." Running one gateway for multiple mutually untrusted users is explicitly not a recommended setup. …
… Even if you follow standard security practices, an urgent app installation from a less trustworthy source can still introduce problems. …
… They're all exploiting the same gap in the VS Code trust model. …
… The risks of consolidation shouldn’t be ignored There are security risks as well The benefits of consolidation are obvious, but they come with structural risks that matter more as VS Code takes on a bigger role. One of the biggest concerns is extension privilege. …
… The brand has already faced increasing scrutiny tied to security concerns and its global supply chain, which makes it one of the most likely names to be affected if regulations tighten further. …
… A progress bar alone can lull you into a false sense of security, but a broader view makes it easier to spot when something looks wrong. That wider view changed how I think about remote jobs. Before, remote printing meant trusting that nothing unusual would happen while I was gone. …
… I would advise downloading apps from trusted, verified open-source repositories or official developer websites only. …