DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
A Small Checklist for Apps That Handle Vulnerable User Data

A Small Checklist for Apps That Handle Vulnerable User Data

Comments
3 min read
Security Pitfalls in React Apps I Learned the Hard Way

Security Pitfalls in React Apps I Learned the Hard Way

Comments
4 min read
Why I gave my AI agent read-only access to my spreadsheets

Why I gave my AI agent read-only access to my spreadsheets

Comments
5 min read
HackTheBox: Bamboo Writeup

HackTheBox: Bamboo Writeup

Comments
6 min read
OpenAI's AI Models Escaped Their Sandbox and Hacked Hugging Face on Their Own

OpenAI's AI Models Escaped Their Sandbox and Hacked Hugging Face on Their Own

1
Comments 1
4 min read
How HTTPS Actually Works: TLS, Certificates, and Encryption

How HTTPS Actually Works: TLS, Certificates, and Encryption

1
Comments
5 min read
Who Is Email Security Actually Built For?

Who Is Email Security Actually Built For?

Comments
2 min read
The $180 Hour

The $180 Hour

1
Comments
3 min read
What I found when I security-scanned 10 AI-built apps (and how to check yours manually)

What I found when I security-scanned 10 AI-built apps (and how to check yours manually)

Comments
4 min read
Every JWT debugger tells you not to paste real tokens. So I built one where it doesn't matter.

Runs entirely client-side via WebCrypto

Every JWT debugger tells you not to paste real tokens. So I built one where it doesn't matter.

5
Comments 14
3 min read
AWS IAM Least Privilege: A Practical Guide to Scoping Down Policies

AWS IAM Least Privilege: A Practical Guide to Scoping Down Policies

Comments
2 min read
I built a self-hosted DPI-resistant tunnel over TLS + WebSocket in Rust

I built a self-hosted DPI-resistant tunnel over TLS + WebSocket in Rust

Comments
1 min read
How I built an end-to-end encrypted pastebin (and why the server can’t read your text)

How I built an end-to-end encrypted pastebin (and why the server can’t read your text)

1
Comments 7
2 min read
Your auth library's maintainer is an agent who never sleeps

Your auth library's maintainer is an agent who never sleeps

Comments
5 min read
From Infrastructure to Open Source: Lessons Learned Building 4 Security & Automation Tools

From Infrastructure to Open Source: Lessons Learned Building 4 Security & Automation Tools

2
Comments 7
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.