DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
"Don't you trust the AI vendor's own sandbox?" I didn't have a good answer.

"Don't you trust the AI vendor's own sandbox?" I didn't have a good answer.

Comments
7 min read
MAESTRO: threat-modeling AI agents in seven layers

MAESTRO: threat-modeling AI agents in seven layers

2
Comments
3 min read
5 decisões importantes em um SaaS multi-tenant

5 decisões importantes em um SaaS multi-tenant

Comments
3 min read
Why your password manager shouldn't have a "god mode"

Why your password manager shouldn't have a "god mode"

Comments
6 min read
JWT vs Session: Which Authentication Method Should You Use?

JWT vs Session: Which Authentication Method Should You Use?

Comments
5 min read
JWT vs OAuth2: What's the Difference and When to Use Each?

JWT vs OAuth2: What's the Difference and When to Use Each?

Comments
5 min read
Malware that runs the moment you open the project

Malware that runs the moment you open the project

Comments
5 min read
Protect sensitive data before sending it to an LLM

Protect sensitive data before sending it to an LLM

Comments
1 min read
Move the task, not the AI account

Move the task, not the AI account

1
Comments
3 min read
How to Decode & Inspect X.509 SSL Certificates and CSRs Without OpenSSL (or Leaking Data to Unknown Servers)

How to Decode & Inspect X.509 SSL Certificates and CSRs Without OpenSSL (or Leaking Data to Unknown Servers)

Comments 1
6 min read
CĂłmo solucionar el error \"Enable JavaScript and cookies to continue\"

CĂłmo solucionar el error \"Enable JavaScript and cookies to continue\"

Comments
3 min read
Catching MCP "Rug Pulls": Hash and Diff Tool Manifests Instead of Re-Reading Them

Catching MCP "Rug Pulls": Hash and Diff Tool Manifests Instead of Re-Reading Them

Comments
3 min read
Only 10 of the top 1000 sites hide the hostname you are visiting. I built the tool that counts.

Only 10 of the top 1000 sites hide the hostname you are visiting. I built the tool that counts.

13
Comments 1
6 min read
Don't Ship Dev Keys! Set Up Production-Ready Google OAuth in React

Don't Ship Dev Keys! Set Up Production-Ready Google OAuth in React

2
Comments 1
2 min read
Implementing Account Recovery Email: Next.js API Route, Custom HTML, and Suppression Checks

Implementing Account Recovery Email: Next.js API Route, Custom HTML, and Suppression Checks

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.