DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Before you connect that MCP server, run these three commands

Before you connect that MCP server, run these three commands

1
Comments
4 min read
Social Sign-In Recovery — JWT Caching with Live Session Introspection

Social Sign-In Recovery — JWT Caching with Live Session Introspection

Comments
7 min read
Identity and Access Control as a Core Security Model

Identity and Access Control as a Core Security Model

Comments
3 min read
The Night Our Server Got Owned — and Why I Built DevCompass

The Night Our Server Got Owned — and Why I Built DevCompass

Comments
2 min read
High-Risk Login Controls with Device Fingerprints, Event Reports, and Step-Up Verification

High-Risk Login Controls with Device Fingerprints, Event Reports, and Step-Up Verification

Comments
6 min read
HTB-Enigma Writeup

HTB-Enigma Writeup

Comments
2 min read
Building a Production-Ready Authentication System with Next.js

Building a Production-Ready Authentication System with Next.js

Comments 1
12 min read
Your SSL Cert Works in Chrome. Here's Why It's Broken Everywhere Else.

Your SSL Cert Works in Chrome. Here's Why It's Broken Everywhere Else.

Comments
4 min read
When your adversary is an AI , Inside the sHUMINT Methodology Part XII

When your adversary is an AI , Inside the sHUMINT Methodology Part XII

Comments 1
11 min read
I Stopped Trusting VPN Ads and Built My Own (Then Automated It) :D

I Stopped Trusting VPN Ads and Built My Own (Then Automated It) :D

Comments 1
6 min read
Blocking `<script>` Won't Stop innerHTML XSS. `setHTML()` Will.

Blocking `<script>` Won't Stop innerHTML XSS. `setHTML()` Will.

8
Comments
7 min read
Vaults, Brokers, and Sandboxes: What Each One Stops, and What None of Them See

Vaults, Brokers, and Sandboxes: What Each One Stops, and What None of Them See

3
Comments 7
5 min read
Customer Domains and DNS Records: Signed URLs for Secure Asset Delivery

Customer Domains and DNS Records: Signed URLs for Secure Asset Delivery

Comments 1
5 min read
Building a Privacy-First Market Layer on Zcash: What ZECpad Is Testing Before Launch

Building a Privacy-First Market Layer on Zcash: What ZECpad Is Testing Before Launch

Comments
2 min read
Three MCP attacks, refused, and you can run it yourself

Three MCP attacks, refused, and you can run it yourself

Comments 2
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.