DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
ted and curlRAT: North Korean Linux Surveillance Toolkit Hiding Inside HAProxy

ted and curlRAT: North Korean Linux Surveillance Toolkit Hiding Inside HAProxy

1
Comments
6 min read
Visa tiene un protocolo de agentes de confianza. Mastercard tiene Verifiable Intent. Esta es la capa que ninguno te da (en espaĂąol)

Visa tiene un protocolo de agentes de confianza. Mastercard tiene Verifiable Intent. Esta es la capa que ninguno te da (en espaĂąol)

Comments
4 min read
I Put a Database on the Public Internet. My Flow Logs Knew Before I Did.

I Put a Database on the Public Internet. My Flow Logs Knew Before I Did.

Comments
5 min read
NestJS Production Checklist: 17 Checks Before You Deploy

Includes strict Zod schema validation tips

NestJS Production Checklist: 17 Checks Before You Deploy

21
Comments 7
17 min read
Your agent's confirm token is one-shot. Your write still happens twice.

Your agent's confirm token is one-shot. Your write still happens twice.

2
Comments 6
5 min read
kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default

kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default

Comments
7 min read
I built a secret scanner that tries to answer “is this secret actually live?"

I built a secret scanner that tries to answer “is this secret actually live?"

Comments
2 min read
OAuth Signup Needs More Than Email Proof

OAuth Signup Needs More Than Email Proof

5
Comments 1
4 min read
I Told a PR Nothing Would Break. Qodo Checked.

I Told a PR Nothing Would Break. Qodo Checked.

13
Comments
4 min read
JWT Tokens: The Modern Authentication/Authorization

JWT Tokens: The Modern Authentication/Authorization

2
Comments 1
2 min read
Your AI Coding Agent Says “Tests Pass.” But Did It Actually Run Them?

Your AI Coding Agent Says “Tests Pass.” But Did It Actually Run Them?

17
Comments 24
5 min read
husk: I extracted the sandbox from my last project, and made the tests do the talking

husk: I extracted the sandbox from my last project, and made the tests do the talking

1
Comments
4 min read
I automated my injection tests, and my first automated result was wrong 👾

I automated my injection tests, and my first automated result was wrong 👾

Comments
6 min read
The Agent Doesn't Have to Be Malicious for the Action to Be Dangerous

The Agent Doesn't Have to Be Malicious for the Action to Be Dangerous

1
Comments
6 min read
Ten Things to Wire Up Before an Agent Touches Production

Ten Things to Wire Up Before an Agent Touches Production

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.