DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Your AI agent's audit log is signed by the thing it's auditing

Your AI agent's audit log is signed by the thing it's auditing

Comments 2
4 min read
The nginx misconfigurations that fail silently

The nginx misconfigurations that fail silently

Comments
5 min read
I DNA-encode my encrypted database before writing it to disk - here's why (and why it's not "quantum" anything)

I DNA-encode my encrypted database before writing it to disk - here's why (and why it's not "quantum" anything)

Comments
2 min read
Claude Code's Read deny rules let 4 of 11 routes through: grep -r, a Python one-liner and two CLAUDE.md @imports

Claude Code's Read deny rules let 4 of 11 routes through: grep -r, a Python one-liner and two CLAUDE.md @imports

2
Comments 7
15 min read
MCP security: what to log when an AI agent calls tools, and what the log can prove

MCP security: what to log when an AI agent calls tools, and what the log can prove

1
Comments 2
7 min read
Designing an eval harness for prompt-injection detection: what measuring my defenses actually taught me

Designing an eval harness for prompt-injection detection: what measuring my defenses actually taught me

Comments 1
6 min read
Mask PII in Grafana Alloy logs without a stage.replace pattern list

Mask PII in Grafana Alloy logs without a stage.replace pattern list

1
Comments 1
8 min read
Before Sovereign AI, You Need Sovereign IT

Before Sovereign AI, You Need Sovereign IT

Comments
5 min read
Your Supabase anon key can probably read your whole users table

Your Supabase anon key can probably read your whole users table

Comments
5 min read
How I Found an SSR Cache Isolation Failure in a React Data Fetching Library

How I Found an SSR Cache Isolation Failure in a React Data Fetching Library

Comments
6 min read
The request.security() Value That Isn't There Yet

The request.security() Value That Isn't There Yet

Comments
4 min read
Please confirm this is real

Users mobilize to flag hundreds of phishing links

Please confirm this is real

19
Comments 26
1 min read
Cloudflare injects a beacon. My CSP said no.

Cloudflare injects a beacon. My CSP said no.

1
Comments
4 min read
The Hostname in Your Diff Is a Clue

The Hostname in Your Diff Is a Clue

1
Comments
6 min read
Transactional Outbox no JurisOS: ResiliĂȘncia Local-First e Criptografia End-to-End com Elixir & BEAM

Transactional Outbox no JurisOS: ResiliĂȘncia Local-First e Criptografia End-to-End com Elixir & BEAM

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.