DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
My Next.js 16 Auth Passed Every Test. Five Bugs That Only Showed Up When I Wired It Together.

Route Handler and browser cookie quirks

My Next.js 16 Auth Passed Every Test. Five Bugs That Only Showed Up When I Wired It Together.

36
Comments 39
9 min read
I Built an Offline SAST Scanner — Try It on Your Code and Tell Me Where It Fails

I Built an Offline SAST Scanner — Try It on Your Code and Tell Me Where It Fails

1
Comments 1
4 min read
Making GBase 8c Auditing Work: Traceable, Retainable, and Queryable

Making GBase 8c Auditing Work: Traceable, Retainable, and Queryable

2
Comments
3 min read
Fixtures First, Rules Second: How to Design a Ground-Truth Corpus

Fixtures First, Rules Second: How to Design a Ground-Truth Corpus

2
Comments
9 min read
I Checked 10 Online PDF Tools — 9 of Them Upload Your Files

I Checked 10 Online PDF Tools — 9 of Them Upload Your Files

Comments
2 min read
What Is MCP Policy Enforcement (And Why Every Agent Needs It)

What Is MCP Policy Enforcement (And Why Every Agent Needs It)

Comments
7 min read
The Fallback Password: Dissecting the Tenda Router Backdoor (CVE-2026-11405)

The Fallback Password: Dissecting the Tenda Router Backdoor (CVE-2026-11405)

11
Comments 1
6 min read
Your Profile Form Shouldn't Change Your Login

Your Profile Form Shouldn't Change Your Login

Comments
4 min read
kinako-llama-cpp : 2. Why Corporate Security Rules Kill Local LLMs, and How 'kinako' Saves Lonely IT Departments

kinako-llama-cpp : 2. Why Corporate Security Rules Kill Local LLMs, and How 'kinako' Saves Lonely IT Departments

Comments
5 min read
The Signature Base Visa Didn't Specify

The Signature Base Visa Didn't Specify

3
Comments
5 min read
Why Most Phishing Detection Tools Fail Non-Technical Users

Why Most Phishing Detection Tools Fail Non-Technical Users

Comments
2 min read
Stateful vs Stateless Authentication

Stateful vs Stateless Authentication

Comments
1 min read
Building a Production MCP Server: Auth, Transport, and the Hard Parts

Building a Production MCP Server: Auth, Transport, and the Hard Parts

Comments 1
9 min read
Harden SSH on Linux with Fail2ban + nftables (A Practical, Auditable Setup)

Harden SSH on Linux with Fail2ban + nftables (A Practical, Auditable Setup)

Comments
3 min read
I built a Terraform security scanner that lives inside GitHub PRs

I built a Terraform security scanner that lives inside GitHub PRs

2
Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.