add security info

docs/index.rst

@@ -105,6 +105,7 @@ Useful links:
    testing_using_Chai_&_Mocha
    FAS
    remixd
+   security
    FAQ
 
 .. toctree::

docs/security.md

@@ -0,0 +1,29 @@
+Using Remix Safely
+==================
+
+- DO NOT send transaction on contracts you don't understand (even if it's a get rich quick scheme that you copy pasted from a Discord DM or a youtube video).  
+
+- Check our [article](https://medium.com/remix-ide/remix-in-youtube-crypto-scams-71c338da32d?source=friends_link&sk=bb6efbbf88bc3e496611943d282ad797) on a current scam promoting "liquidity front runner bots".
+
+- Always check that you are loading Remix over HTTPS unless you have a specific reason for accessing it with HTTP (e.g. for using Remix locally or for a connection you trust).
+
+- For production applications, DO NOT use GitHub/NPM imports because you don't know what version of files you are getting and the builds are not reproducible.
+
+- When connecting a contract to an existing deployment, ensure that the thing you are connecting to is correct AND is the correct version.
+
+- Always be sure to address or understand every warning.
+
+- Remix is a subdomain of ethereum.org - so the only valid Remix urls are:
+    - remix.ethereum.org
+    - remix-alpha.ethereum.org
+    - remix-beta.ethereum.org  
+
+If you are directed to some site that looks like Remix but has a **similar but different URL** - it is NOT Remix and is likely a scam.
+
+### Remix's ease makes its users a target
+Because Remix has no setup, it has a large community of noobies to smart contract development. This is great, but it provides a target audience for scammers exploit. Without Remix, the scammers would first need to instruct victims to set up a local dev environment, which would severely limit the success rate of the scam.
+
+Scams lose their effectiveness when potential victims are educated about scams and about how to read and understand code. Learn Solidity and learn it well!  
+
+For Solidity Tutorials in Remix, go to the LearnEth plugin.
+