Topic
9 articles in this thread. Browse all topics.
VS Code stores configuration, extension state, workspace state, local file history, plugins, and logs across several locations on macOS. This post maps those directories, explains what they reveal, and separates local editor state from GitHub Copilot CLI and cloud data.
Overlapping plugins complicate attributing coding-agent outcomes to the model or its configuration. This post distinguishes package resolution from per-run behaviour and proposes controlled comparisons using invocation traces, correctness, safety and cost.
The MCP authorization draft deprecates Dynamic Client Registration as a compatibility fallback, not as an OAuth mechanism globally. Client ID Metadata Documents offer portable, origin-associated metadata, but do not authenticate a running public client. This article explains the operational trade-offs, localhost impersonation risks and metadata-fetch protections that remain.
An OAuth proxy can connect MCP clients to an Entra-backed service while keeping downstream registration separate from upstream application provisioning. This conceptual walkthrough explains the two authorization transactions, per-client consent, token validation and refresh limits that make the proxy a security-critical authorization server.
Learn how to secure your web applications by managing user sessions and protecting them from common security vulnerabilities such as session hijacking, cross-site scripting (XSS), and SQL injection.
Developers are the driving force behind innovation in most technology companies today. However, rigid security practices often hamper their productivity by delaying access to critical systems and tool. How do we find a balance between security and productivity?
Read Securing Access to Azure PaaS Services Using Managed Identities on CRUD Flow.
Demystifying AWS Cloud IAM using the roles and strategies of a championship-winning team like Manchester City - a novel approach to understanding complex cloud security concepts
Read Understanding AWS IAM using a football analogy - Manchester City on CRUD Flow.
