DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Nobody Painted That Rectangle Black

Nobody Painted That Rectangle Black

10
Comments
4 min read
Implementing FIDO's new passkey-export format — and the five spec bugs I found

Implementing FIDO's new passkey-export format — and the five spec bugs I found

Comments
2 min read
Building a Real SIEM Lab on a Mac Mini Fleet — What Actually Broke, and What I Learned Fixing It

Building a Real SIEM Lab on a Mac Mini Fleet — What Actually Broke, and What I Learned Fixing It

Comments
4 min read
Best Practices for Managing AWS WAF with Code

Best Practices for Managing AWS WAF with Code

Comments
8 min read
Orion Belt v1.0 — from Alpha bastion to a stable self-hosted SSH PAM

Orion Belt v1.0 — from Alpha bastion to a stable self-hosted SSH PAM

Comments
4 min read
Your Browser Is a Supercomputer. Stop Sending Your Data to Someone Else's server.

Your Browser Is a Supercomputer. Stop Sending Your Data to Someone Else's server.

1
Comments
6 min read
That anon Key Is Effectively Public: Closing an Auth Hole in a Supabase Edge Function's publicActions

That anon Key Is Effectively Public: Closing an Auth Hole in a Supabase Edge Function's publicActions

Comments
5 min read
Enforcing SSE-KMS on S3 buckets across all AWS accounts

Enforcing SSE-KMS on S3 buckets across all AWS accounts

8
Comments
7 min read
I stopped trusting my own app's encryption, so I rebuilt it — ATLOCK v4 is Here.

I stopped trusting my own app's encryption, so I rebuilt it — ATLOCK v4 is Here.

16
Comments 1
3 min read
Simplifying Authorization in NestJS: A New Approach

Simplifying Authorization in NestJS: A New Approach

Comments
2 min read
Beware: Your Coding Agent Trips the Same EDR Rules Built to Catch Attackers

Beware: Your Coding Agent Trips the Same EDR Rules Built to Catch Attackers

Comments
7 min read
We Planted 10 Vulnerabilities to Test Free Semgrep. It Reported 3.

We Planted 10 Vulnerabilities to Test Free Semgrep. It Reported 3.

3
Comments 2
6 min read
The AI Agent Era is Here, And It's Terrifying.

The AI Agent Era is Here, And It's Terrifying.

Comments
4 min read
The "Laravel Isn't Secure Enough for Enterprise" Myth is Dead

The "Laravel Isn't Secure Enough for Enterprise" Myth is Dead

Comments
3 min read
How GAUNTLEX Gates HIPAA/FINRA Compliance in CI

How GAUNTLEX Gates HIPAA/FINRA Compliance in CI

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.