DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Both verifiers were honest, agreed with each other, and the signatures still failed

Both verifiers were honest, agreed with each other, and the signatures still failed

5
Comments 1
3 min read
The .env File Problem: Why Your Secrets Are Closer to Public Than You Think

The .env File Problem: Why Your Secrets Are Closer to Public Than You Think

Comments
5 min read
Your MongoDB Login Query Might Be Vulnerable to a One-Line Bypass

Your MongoDB Login Query Might Be Vulnerable to a One-Line Bypass

Comments
4 min read
A read-only SQL check for the 3 Supabase mistakes AI app builders leave behind

A read-only SQL check for the 3 Supabase mistakes AI app builders leave behind

1
Comments 1
3 min read
How I Audit JavaScript Regexes for Catastrophic Backtracking

How I Audit JavaScript Regexes for Catastrophic Backtracking

Comments
5 min read
SQL Injection thời AI: Cách phòng thủ tối ưu

SQL Injection thời AI: Cách phòng thủ tối ưu

Comments
4 min read
Trust Boundaries in AI Coding's Free Servers

Trust Boundaries in AI Coding's Free Servers

1
Comments
4 min read
From string-concatenation to a real DSH bundle: one link, six verified plugins

From string-concatenation to a real DSH bundle: one link, six verified plugins

Comments
3 min read
Our System Series: Sensitive Data Encryption

Our System Series: Sensitive Data Encryption

Comments
4 min read
Chống DDoS Layer 7 Với Cloudflare Workers & KV

Chống DDoS Layer 7 Với Cloudflare Workers & KV

Comments
4 min read
Stuck on Casbin's model.conf? 5 mistakes beginners hit most

Stuck on Casbin's model.conf? 5 mistakes beginners hit most

Comments
3 min read
Using Claude on AWS: Why Your Integration Choice Matters

Using Claude on AWS: Why Your Integration Choice Matters

1
Comments
4 min read
I DNA-encode my encrypted database before writing it to disk - here's why (and why it's not "quantum" anything)

I DNA-encode my encrypted database before writing it to disk - here's why (and why it's not "quantum" anything)

Comments 1
2 min read
"Pinned to a SHA" is a lie your coding agent told you. Here's the Git trick behind Plugin4Shell.

"Pinned to a SHA" is a lie your coding agent told you. Here's the Git trick behind Plugin4Shell.

6
Comments 19
3 min read
I tested my sandbox against Deno and plain Python on 63 AI-written scripts

I tested my sandbox against Deno and plain Python on 63 AI-written scripts

1
Comments 4
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.