DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The pre-audit checklist I run before paying for a smart contract audit (Solidity + Solana)

The pre-audit checklist I run before paying for a smart contract audit (Solidity + Solana)

1
Comments
2 min read
The pitfalls of configuring OpenIddict from scratch — what can go wrong

The pitfalls of configuring OpenIddict from scratch — what can go wrong

1
Comments 1
5 min read
A bug in Qwen3-TTS taught me voice is biometric

A bug in Qwen3-TTS taught me voice is biometric

23
Comments 6
3 min read
I Learned Go by Hacking Kubernetes RBAC Security (And Nearly Quit 5 Times)

Deterministic fingerprinting for stable audits

I Learned Go by Hacking Kubernetes RBAC Security (And Nearly Quit 5 Times)

21
Comments 9
7 min read
The Silent Threat of Off-by-Slash: How Your Reverse Proxy is Leaking Source Code

The Silent Threat of Off-by-Slash: How Your Reverse Proxy is Leaking Source Code

1
Comments
3 min read
NETO: Chat P2P local para equipos dev — sin nube, sin excusas

NETO: Chat P2P local para equipos dev — sin nube, sin excusas

Comments
1 min read
AINAScan v1.1.1 — Web UI Live, 48 Patterns, Auto-fix (Thank You for the Traffic)

AINAScan v1.1.1 — Web UI Live, 48 Patterns, Auto-fix (Thank You for the Traffic)

Comments
2 min read
Use SQLite STRICT Tables for Agent Control Data

Use SQLite STRICT Tables for Agent Control Data

Comments
3 min read
The Service That Stored Nothing Sensitive But Still Became High Priority

The Service That Stored Nothing Sensitive But Still Became High Priority

Comments
7 min read
Real-Time VPN & Proxy Detection: Why Static IP Databases Are Failing You

Real-Time VPN & Proxy Detection: Why Static IP Databases Are Failing You

Comments
2 min read
How I Found and Fixed an Open Redirect Vulnerability in My Startup

How I Found and Fixed an Open Redirect Vulnerability in My Startup

Comments
3 min read
Detect VPNs, Proxies, and Bots in Your Web App: A Practical Guide

Detect VPNs, Proxies, and Bots in Your Web App: A Practical Guide

Comments
4 min read
I Put Eight Security Bugs in a Flask App on Purpose. The Robots Only Caught Some of Them.

I Put Eight Security Bugs in a Flask App on Purpose. The Robots Only Caught Some of Them.

Comments 4
6 min read
We scanned 12 popular MCP servers. The most interesting finding was our own false positives.

We scanned 12 popular MCP servers. The most interesting finding was our own false positives.

Comments
4 min read
MCP, Tool Use, and the New Attack Surface Nobody Is Mapping

MCP, Tool Use, and the New Attack Surface Nobody Is Mapping

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.