commit security tutorial for review

[zamrokk]

Please give me any feedback on the security tutorial.
If more code is required to understand or hack a specific thing, please tell me.
It is not often easy to test security threats

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated (UTC)
docs-staging	✅ Ready (Inspect)	Visit Preview	Jan 30, 2024 2:42pm

[zamrokk]

Grammar is fixed. Is it ok now ?

[timothymcmackin]

I rebased and added some fixes to get this to build.

[timothymcmackin]

I can't review well because the repos appear to be missing or private.

[timothymcmackin]

The overview page has a long section on off-chain security, but the active parts of the tutorial are all on-chain security. Maybe this overview, both the on-chain and off-chain part, should be moved to a Security page under https://docs.tezos.com/dApps/best-practices?

[zamrokk]

The overview page has a long section on off-chain security, but the active parts of the tutorial are all on-chain security. Maybe this overview, both the on-chain and off-chain part, should be moved to a Security page under https://docs.tezos.com/dApps/best-practices?

Lot of offchain hacks are very basic web2 hacks. IMO, it is not necessary to invest too much on this as it does not add something new.
Onchain attacks are specific to web3 and new. It is important to explain how to protect against it

About the location of the introduction. Up to you. It is not just about "best practice", it is about security concern

[timothymcmackin]

The overview page has a long section on off-chain security, but the active parts of the tutorial are all on-chain security. Maybe this overview, both the on-chain and off-chain part, should be moved to a Security page under https://docs.tezos.com/dApps/best-practices?

Lot of offchain hacks are very basic web2 hacks. IMO, it is not necessary to invest too much on this as it does not add something new. Onchain attacks are specific to web3 and new. It is important to explain how to protect against it

About the location of the introduction. Up to you. It is not just about "best practice", it is about security concern

All right, I'm OK with it as it is. Should I merge it with my and Claude's approval?

[zamrokk]

The overview page has a long section on off-chain security, but the active parts of the tutorial are all on-chain security. Maybe this overview, both the on-chain and off-chain part, should be moved to a Security page under https://docs.tezos.com/dApps/best-practices?

Lot of offchain hacks are very basic web2 hacks. IMO, it is not necessary to invest too much on this as it does not add something new. Onchain attacks are specific to web3 and new. It is important to explain how to protect against it
About the location of the introduction. Up to you. It is not just about "best practice", it is about security concern

All right, I'm OK with it as it is. Should I merge it with my and Claude's approval?

For me it is ok, it can be improved later with future feedbacks

[timothymcmackin]

Merging. Thanks, @zamrokk!