DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Reading a Verified Contract You Didn't Write: A Systematic Approach

Reading a Verified Contract You Didn't Write: A Systematic Approach

1
Comments
3 min read
Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Comments
17 min read
HighLevel webhooks flip X-WH-Signature X-GHL-Signature on July 1, 2026 — three silent failure modes

HighLevel webhooks flip X-WH-Signature X-GHL-Signature on July 1, 2026 — three silent failure modes

Comments
5 min read
Two ways to reuse a privileged CI token (and my rule only caught one)

Two ways to reuse a privileged CI token (and my rule only caught one)

1
Comments 2
5 min read
Managing Environment Variables and Secrets

Managing Environment Variables and Secrets

Comments
9 min read
Your AI Agent in Production Is Not Auditable. August 2026 Changes Everything.

Your AI Agent in Production Is Not Auditable. August 2026 Changes Everything.

3
Comments 19
3 min read
How to Deploy a Secure Hub-and-Spoke Cluster Across Proxmox LXC

How to Deploy a Secure Hub-and-Spoke Cluster Across Proxmox LXC

Comments
3 min read
Keyless by Default: Securing FarmOps Desk without a Single Static Secret

Keyless by Default: Securing FarmOps Desk without a Single Static Secret

Comments
4 min read
How to Remove EXIF and GPS Metadata Before Sharing a Photo

How to Remove EXIF and GPS Metadata Before Sharing a Photo

5
Comments 11
2 min read
What is Content Security Policy (CSP)?

What is Content Security Policy (CSP)?

1
Comments 2
2 min read
The CompTIA concepts people keep confusing (and how to actually tell them apart)

The CompTIA concepts people keep confusing (and how to actually tell them apart)

Comments
5 min read
Mission-Critical Cyber-Physical Control Loop for T1D Management

Mission-Critical Cyber-Physical Control Loop for T1D Management

Comments
4 min read
Kubernetes earned its security badge in 2017 and never came back

Kubernetes earned its security badge in 2017 and never came back

Comments 2
16 min read
Signed token between two PWAs: HMAC-SHA256 with no backend

Signed token between two PWAs: HMAC-SHA256 with no backend

1
Comments
4 min read
The C2 Channel Is a Headless Browser

The C2 Channel Is a Headless Browser

2
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.