DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Drop session_start() from Your Paywall: HMAC-Signed Cookies and Single-Use Recovery Links

Drop session_start() from Your Paywall: HMAC-Signed Cookies and Single-Use Recovery Links

Comments
7 min read
Building Censorship-Resistant Communication: Transports, Coercion Resistance, and Dead Man's Switches

Building Censorship-Resistant Communication: Transports, Coercion Resistance, and Dead Man's Switches

Comments
4 min read
I built a GitHub Actions security scanner, then spent longer proving it wrong

I built a GitHub Actions security scanner, then spent longer proving it wrong

1
Comments 5
9 min read
OpenAI's Agents Built a Secret Message Board to Coordinate Attacks. Four Labs Lost Control in Two Weeks. We Have 10 Million Records Nobody's Watching.

OpenAI's Agents Built a Secret Message Board to Coordinate Attacks. Four Labs Lost Control in Two Weeks. We Have 10 Million Records Nobody's Watching.

Comments
7 min read
What Is Clickjacking? How Can a Website Be Tricked Into Receiving a Click?

What Is Clickjacking? How Can a Website Be Tricked Into Receiving a Click?

1
Comments 3
5 min read
The off-switch was never a button

The off-switch was never a button

Comments 2
8 min read
22 Things You Should Test Before Shipping an LLM Prompt to Production

22 Things You Should Test Before Shipping an LLM Prompt to Production

Comments
5 min read
After March 30: When AI Started Finding Vulnerabilities Faster Than Humans Could Patch Them

After March 30: When AI Started Finding Vulnerabilities Faster Than Humans Could Patch Them

Comments
9 min read
Defender Is Dead — Here's How I Track Protocol State Across 15 DeFi Protocols Now

Defender Is Dead — Here's How I Track Protocol State Across 15 DeFi Protocols Now

Comments
3 min read
Segurança na AWS Inicia com como criar identidade: IAM, além de usuários e roles.

Segurança na AWS Inicia com como criar identidade: IAM, além de usuários e roles.

1
Comments
6 min read
npm Supply-Chain Hardening in 2026: Lifecycle Scripts, minimumReleaseAge, and the Postinstall I Stopped Trusting

npm Supply-Chain Hardening in 2026: Lifecycle Scripts, minimumReleaseAge, and the Postinstall I Stopped Trusting

Comments 2
7 min read
Stripping invisible Unicode usually corrupts your text. Here is how to not do that.

Stripping invisible Unicode usually corrupts your text. Here is how to not do that.

1
Comments
4 min read
Do the Top Domains Actually Protect Their Email? SPF, DMARC and MTA-STS, Measured

Do the Top Domains Actually Protect Their Email? SPF, DMARC and MTA-STS, Measured

1
Comments 1
3 min read
How to test a LangChain agent for security (in 15 lines of FastAPI)

How to test a LangChain agent for security (in 15 lines of FastAPI)

1
Comments
6 min read
Nobody's coming to clean your supply chain

Nobody's coming to clean your supply chain

Comments 2
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.