DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Compare Against the Schema They Shipped, Not the One You Expected

A brilliant post-mortem on rigid tool assertions
kenielzep97 profile

Compare Against the Schema They Shipped, Not the One You Expected

#security #ai #testing #opensource
36
Comments 51
5 min read
The Receipt Was Cryptographically Valid. The Action Didn't Match the Judgment.
kikashy profile

The Receipt Was Cryptographically Valid. The Action Didn't Match the Judgment.

#ai #security #testing #opensource
1
Comments 1
11 min read
Your CVSS >= 7.0 filter is silently dropping the CVEs you most want
takahiro_hashito_a1f3f0dc profile

Your CVSS >= 7.0 filter is silently dropping the CVEs you most want

#security #node #automation
Comments 1
5 min read
Hardening a SaaS login on Cloudflare Free: Turnstile, Google sign-in and email without SMTP
alexandroskyv profile

Hardening a SaaS login on Cloudflare Free: Turnstile, Google sign-in and email without SMTP

#security #webdev #node #saas
Comments 1
5 min read
Cognito With the Safety Off: MFA Disabled, Advanced Security Disabled
bala_paranj_059d338e44e7e profile

Cognito With the Safety Off: MFA Disabled, Advanced Security Disabled

#security #aws #cloud #appsec
Comments 1
6 min read
Your Agent Reads Untrusted Text All Day. Here's How I Grade What It Does With It.
byteio_3726 profile

Your Agent Reads Untrusted Text All Day. Here's How I Grade What It Does With It.

#security #ai #agents #testing
Comments
6 min read
Your AI Coding Assistant Writes Shell Commands. Do You Actually Test Them Before They Run?
apppro_5726 profile

Your AI Coding Assistant Writes Shell Commands. Do You Actually Test Them Before They Run?

#ai #security #productivity #bash
Comments
5 min read
How to Build an Attack-Surface Inventory from Certificate Transparency
weeknds profile

How to Build an Attack-Surface Inventory from Certificate Transparency

#tutorial #python #security #webdev
Comments
5 min read
A Disposable Sandbox Pattern for Testing AI Coding Agents Safely
gitrs_5994 profile

A Disposable Sandbox Pattern for Testing AI Coding Agents Safely

#ai #security #productivity #tutorial
Comments
4 min read
Before Your AI Coding Agent Gets More Tools, Test Where Its Boundaries Actually Are
hackcpp_3619 profile

Before Your AI Coding Agent Gets More Tools, Test Where Its Boundaries Actually Are

#ai #security #agents #devops
Comments
5 min read
A Reproducible Sandbox for Testing AI Agent Tool Boundaries on a Free Server
techlab_7968 profile

A Reproducible Sandbox for Testing AI Agent Tool Boundaries on a Free Server

#security #ai #agents #programming
Comments
5 min read
Daily Dose of DevOps — GitHub Actions basics for DevOps
marco13moo profile

Daily Dose of DevOps — GitHub Actions basics for DevOps

#automation #cicd #devops #security
Comments 1
2 min read
Don't Trust the Transcript: A Pytest Harness That Audits What Your AI Coding Agent Actually Did
airs_6907 profile

Don't Trust the Transcript: A Pytest Harness That Audits What Your AI Coding Agent Actually Did

#ai #security #testing #agents
Comments
6 min read
Architecting Secure Webhooks in Laravel đź”’
iprajapatiparesh profile

Architecting Secure Webhooks in Laravel đź”’

#laravel #php #security #architecture
Comments
4 min read
Your Agent's Permission Slip Belongs in Version Control, Not in a Prompt
hackhub_6179 profile

Your Agent's Permission Slip Belongs in Version Control, Not in a Prompt

#security #ai #agents #testing
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.