DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Repository Agent-Security Gap Study — v2

Repository Agent-Security Gap Study — v2

1
Comments
8 min read
METR AI Infrastructure Compromise: Fail-Open Authentication Leads to API Key Theft, SSH Persistence, and $600K in Unauthorized Usage

METR AI Infrastructure Compromise: Fail-Open Authentication Leads to API Key Theft, SSH Persistence, and $600K in Unauthorized Usage

1
Comments 2
10 min read
Debugging JWTs without a third party seeing your token

Debugging JWTs without a third party seeing your token

3
Comments
1 min read
Your primary key shouldn't be in the URL

Your primary key shouldn't be in the URL

Comments
3 min read
What Happens During a TLS Handshake?

What Happens During a TLS Handshake?

1
Comments
6 min read
What actually happens when a TLS certificate expires (and how I built a Bash guardrail for it)

What actually happens when a TLS certificate expires (and how I built a Bash guardrail for it)

Comments 6
3 min read
JWT Pitfalls I Actually Ran Into (Building an API Gateway and a Carpooling App)

JWT Pitfalls I Actually Ran Into (Building an API Gateway and a Carpooling App)

1
Comments
3 min read
OpenAI's SB 53 Pivot Is a Safety Incident Report in Disguise

OpenAI's SB 53 Pivot Is a Safety Incident Report in Disguise

1
Comments
6 min read
Can you steal a robot's next move by watching its clock? Journal of our experiments on timing side channels in multi agent RL

Can you steal a robot's next move by watching its clock? Journal of our experiments on timing side channels in multi agent RL

Comments
6 min read
I Built an AI Agent to Boss Me Around — and It Made Me Launch an Open Source Project

I Built an AI Agent to Boss Me Around — and It Made Me Launch an Open Source Project

1
Comments
2 min read
Phishing Attack Prevention: Why These Scams Still Work

Phishing Attack Prevention: Why These Scams Still Work

Comments
4 min read
Your AI Agent Has Access. That Doesn’t Mean It Has Approval.

Your AI Agent Has Access. That Doesn’t Mean It Has Approval.

Comments
3 min read
H100 vs H200 vs B200: How to Choose a GPU for AI Workloads in 2026

H100 vs H200 vs B200: How to Choose a GPU for AI Workloads in 2026

Comments
9 min read
Data Classification Without Turning It Into Bureaucracy

Data Classification Without Turning It Into Bureaucracy

Comments 2
2 min read
Automatically Secure Your Livewire 4 Components From Client-Side Tampering

Automatically Secure Your Livewire 4 Components From Client-Side Tampering

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.