DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
No accounts meant no license server — so my $19 one-time SaaS signs its keys with ECDSA P-256

No accounts meant no license server — so my $19 one-time SaaS signs its keys with ECDSA P-256

Comments
5 min read
Detecting OAuth consent phishing in Microsoft 365 audit logs

Detecting OAuth consent phishing in Microsoft 365 audit logs

1
Comments 1
10 min read
How to Add Tamper-Evident Audit Logs to AI Agents with SHA-256 Chaining

How to Add Tamper-Evident Audit Logs to AI Agents with SHA-256 Chaining

Comments 2
4 min read
The Black Rectangle That Doesn't Redact

The Black Rectangle That Doesn't Redact

Comments
6 min read
pdfium and pypdf return different text from the same PDF — four mismatches to know before you feed PDFs to an LLM

pdfium and pypdf return different text from the same PDF — four mismatches to know before you feed PDFs to an LLM

Comments
17 min read
No CVE needed: how a GitHub issue hijacked an AI agent

No CVE needed: how a GitHub issue hijacked an AI agent

2
Comments 3
5 min read
Nobody left to fix it: measuring dependencies with no maintainer

Nobody left to fix it: measuring dependencies with no maintainer

2
Comments
5 min read
Flash Loan Attack Vector Analysis: Bitstamp

Flash Loan Attack Vector Analysis: Bitstamp

Comments
7 min read
Introduction to the OWASP Top 10: Building Secure Web Applications

Introduction to the OWASP Top 10: Building Secure Web Applications

1
Comments
7 min read
Cloud Security Has No TodoMVC. So We Built One.

Cloud Security Has No TodoMVC. So We Built One.

1
Comments
5 min read
Every Trust Number Is a Numerator

Every Trust Number Is a Numerator

2
Comments
6 min read
I Built an Interactive 365-Day Linux & SOC Analyst Master Platform (with Live In-Browser Labs & Threat Intel) 🚀

I Built an Interactive 365-Day Linux & SOC Analyst Master Platform (with Live In-Browser Labs & Threat Intel) 🚀

Comments 1
2 min read
A Matching Checksum Doesn't Prove What You Think: Integrity vs Authenticity

A Matching Checksum Doesn't Prove What You Think: Integrity vs Authenticity

1
Comments
4 min read
llm-guard is archived. I built a deterministic replacement.

llm-guard is archived. I built a deterministic replacement.

3
Comments 4
4 min read
Prompt Injection in Copilot Chatbot — Phishing via Client-Controlled Context

Prompt Injection in Copilot Chatbot — Phishing via Client-Controlled Context

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.