DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
How well do prompt injection defenses work? 1,800 trials, 4 defenses, 3 models

How well do prompt injection defenses work? 1,800 trials, 4 defenses, 3 models

Comments 1
8 min read
A one-page model-substitution audit report: the template

A one-page model-substitution audit report: the template

Comments
4 min read
How We Engineered a Stateless SAML 2.0 to HS256 JWT Middleware Proxy (Zero-PII Architecture)

How We Engineered a Stateless SAML 2.0 to HS256 JWT Middleware Proxy (Zero-PII Architecture)

Comments
3 min read
Stack Canaries on x64 Windows: Leaking and Patching the Birdy

Stack Canaries on x64 Windows: Leaking and Patching the Birdy

Comments
6 min read
58% of top repos' Actions float on a tag. I counted

58% of top repos' Actions float on a tag. I counted

Comments
4 min read
IP Whitelists and Passwords Authenticate Different Things. One SOCKS5 Byte Explains Why.

IP Whitelists and Passwords Authenticate Different Things. One SOCKS5 Byte Explains Why.

Comments 1
5 min read
Private SaaS Document Storage with Signed Links and 1-Day Retention (Trade-offs)

Private SaaS Document Storage with Signed Links and 1-Day Retention (Trade-offs)

Comments 1
5 min read
🔐 EstadoSeguro: análisis automatizado de vulnerabilidades web con Nuclei, GitHub Actions y Render

🔐 EstadoSeguro: análisis automatizado de vulnerabilidades web con Nuclei, GitHub Actions y Render

1
Comments
12 min read
My Mac app can't link networking code. It still went online.

My Mac app can't link networking code. It still went online.

Comments
6 min read
Arcus Perps Exploit: Subaccount Bug Drains $2.23M

Arcus Perps Exploit: Subaccount Bug Drains $2.23M

Comments
7 min read
Security Is an Architectural Decision, Not a Finishing Touch

Security Is an Architectural Decision, Not a Finishing Touch

Comments
3 min read
Direct Forwarding vs a Local Relay: How to Plan WAF Attack Logs for Syslog

Direct Forwarding vs a Local Relay: How to Plan WAF Attack Logs for Syslog

1
Comments 1
4 min read
Shared WAF Limits vs Path-Specific Limits: How to Choose Enforcement Placement

Shared WAF Limits vs Path-Specific Limits: How to Choose Enforcement Placement

Comments 1
4 min read
Python Just Got a New Kind of String. It Could End a Whole Class of Security Bugs.

Python Just Got a New Kind of String. It Could End a Whole Class of Security Bugs.

1
Comments
8 min read
S3 vs Supabase Storage: Choose S3 for 3 Direct Presigned Private Browser Upload Controls

S3 vs Supabase Storage: Choose S3 for 3 Direct Presigned Private Browser Upload Controls

Comments
6 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.