DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AutoJack: One Web Page Turns a Local AI Agent Into Host Code Execution

AutoJack: One Web Page Turns a Local AI Agent Into Host Code Execution

Comments
4 min read
This endpoint has auth. The tests are green. It still lets a user hand themselves admin.

This endpoint has auth. The tests are green. It still lets a user hand themselves admin.

1
Comments 2
3 min read
I built a Chrome extension that catches every dark pattern trick on shopping sites. Here's exactly how.

I built a Chrome extension that catches every dark pattern trick on shopping sites. Here's exactly how.

Comments
4 min read
I Evaluated 6 AI Workspace Platforms for 90 Days. Here Is the Unfiltered Version.

I Evaluated 6 AI Workspace Platforms for 90 Days. Here Is the Unfiltered Version.

Comments 1
6 min read
Defense in Depth for an Agent That Will Definitely Screw Up

Defense in Depth for an Agent That Will Definitely Screw Up

Comments
5 min read
The wristband problem

The wristband problem

Comments 1
5 min read
La Compatibilidad Que No Me HabĂ­a Ganado

La Compatibilidad Que No Me HabĂ­a Ganado

1
Comments
7 min read
MythX shut down in March and nothing replaced it so I built something

MythX shut down in March and nothing replaced it so I built something

Comments
2 min read
Two credentials, two threat models: auth for a content API

Two credentials, two threat models: auth for a content API

2
Comments
5 min read
Gartner Says 40% of AI Agents Will Be Decommissioned by 2027. The Kill Switch Is Why.

Gartner Says 40% of AI Agents Will Be Decommissioned by 2027. The Kill Switch Is Why.

2
Comments
3 min read
Designing an Enterprise SFTP Integration Platform

Designing an Enterprise SFTP Integration Platform

1
Comments 2
4 min read
I tricked GPT-4o into executing malicious tools (and built ModelFuzz to stop it)

I tricked GPT-4o into executing malicious tools (and built ModelFuzz to stop it)

2
Comments
2 min read
The Signup Form With Nothing to Filter

The Signup Form With Nothing to Filter

1
Comments
5 min read
Reconciling 8 IP-reputation feeds into one verdict: averaging is the wrong default

Reconciling 8 IP-reputation feeds into one verdict: averaging is the wrong default

Comments
5 min read
DNS Rebinding and NXDOMAIN Hijacking: Two Overlooked DNS Attacks

DNS Rebinding and NXDOMAIN Hijacking: Two Overlooked DNS Attacks

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.