Skip to content

DEV Community

Foundations Series' Articles

Back to Ofri Peretz's Series

Cover image for The Base Rate Problem: Why 95% Precision Means Nothing Without Context

Jul 18

The Base Rate Problem: Why 95% Precision Means Nothing Without Context

#security #devsecops #node #javascript

7 min read

Cover image for Bias in Measurement: The Silent Failure Mode in Benchmark Design

Jul 18

Bias in Measurement: The Silent Failure Mode in Benchmark Design

#security #devsecops #node #javascript

8 min read

Cover image for Goodhart's Law in Benchmarking: When the Metric Becomes the Target

Jul 18

Goodhart's Law in Benchmarking: When the Metric Becomes the Target

#security #devsecops #node #javascript

7 min read

Cover image for Inter-Rater Agreement and Cohen's Kappa: When Your Labels Are Opinions

Jul 18

Inter-Rater Agreement and Cohen's Kappa: When Your Labels Are Opinions

#security #devsecops #node #javascript

7 min read

Cover image for The Confusion Matrix: What TP, FP, FN, and TN Actually Mean

Jul 19

The Confusion Matrix: What TP, FP, FN, and TN Actually Mean

#security #devsecops #node #javascript

8 min read

Cover image for Composite Scores and Weighting: Your 'Overall Score' Is an Editorial

Jul 19

Composite Scores and Weighting: Your 'Overall Score' Is an Editorial

#security #devsecops #node #javascript

8 min read

Cover image for CVSS Scores Explained: The Number Measures Severity, Not Risk

Jul 19

CVSS Scores Explained: The Number Measures Severity, Not Risk

#security #devsecops #node #javascript

8 min read

Cover image for The CWE Taxonomy, Explained: A Name Is Not a Verdict

Jul 19

The CWE Taxonomy, Explained: A Name Is Not a Verdict

#security #devsecops #node #javascript

8 min read

Cover image for Ground Truth in Security Testing: Who Decides What's Vulnerable?

Jul 19

Ground Truth in Security Testing: Who Decides What's Vulnerable?

#security #devsecops #node #javascript

8 min read

Cover image for OWASP Top 10, Explained: An Address System, Not a Severity Scale

Jul 19

OWASP Top 10, Explained: An Address System, Not a Severity Scale

#security #devsecops #node #javascript

8 min read

Cover image for Ranking vs. Measuring: What a Leaderboard Throws Away

Jul 19

Ranking vs. Measuring: What a Leaderboard Throws Away

#security #devsecops #node #javascript

8 min read

Cover image for Reproducibility vs Replicability: Why Benchmark Numbers Need Both

Jul 19

Reproducibility vs Replicability: Why Benchmark Numbers Need Both

#security #devsecops #node #javascript

7 min read

Cover image for Statistical Significance and p-Values: What p > 0.05 Actually Means

Jul 19

Statistical Significance and p-Values: What p > 0.05 Actually Means

#security #devsecops #node #javascript

8 min read

Cover image for Taint vs. Heuristic Detection: The Difference Between a Proof and a Hunch

Jul 19

Taint vs. Heuristic Detection: The Difference Between a Proof and a Hunch

#security #eslint #devsecops #javascript

7 min read

Cover image for Precision, Recall, and F1 for Static Analysis: Same Score, Opposite Tools

Jul 19

Precision, Recall, and F1 for Static Analysis: Same Score, Opposite Tools

#security #devsecops #node #javascript

8 min read

Cover image for Proxy Metrics: The Number You Optimize Is Not the Thing You Want

Jul 19

Proxy Metrics: The Number You Optimize Is Not the Thing You Want

#security #devsecops #node #javascript

8 min read

Cover image for Sample Size and Statistical Power: What a Small Sample Can and Cannot Tell You

Jul 19

Sample Size and Statistical Power: What a Small Sample Can and Cannot Tell You

#security #devsecops #node #javascript

8 min read

Cover image for Static Analysis vs. SAST vs. Linting: The Taxonomy That Matters for Security Teams

Jul 19

Static Analysis vs. SAST vs. Linting: The Taxonomy That Matters for Security Teams

#security #devsecops #node #javascript

8 min read

Cover image for Valid vs. Reliable Metrics: Consistent Numbers Can Still Be Wrong

Jul 19

Valid vs. Reliable Metrics: Consistent Numbers Can Still Be Wrong

#security #devsecops #node #javascript

7 min read

Cover image for Nobody Writes Bad Crypto. They Write Correct Crypto at Four Layers.

Aug 1

Nobody Writes Bad Crypto. They Write Correct Crypto at Four Layers.

#ai #security #node #javascript

4 min read

Cover image for innerHTML Has Five Doors. Most Reviews Only Watch One.

Aug 8

innerHTML Has Five Doors. Most Reviews Only Watch One.

#ai #webdev #security #eslint

5 min read