DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Beyond Login: Building a Production Authentication Lifecycle in FastAPI
houngdev profile

Beyond Login: Building a Production Authentication Lifecycle in FastAPI

#fastapi #python #security #opensource
Comments 2
5 min read
Cross-Chain Bridge Risk Assessment: Tether Gold
dannydoes_2abdf9c profile

Cross-Chain Bridge Risk Assessment: Tether Gold

#web3 #security #ethereum #defi
Comments
7 min read
What Is Web Cache Poisoning? How Can a Cached Response Become a Security Problem?
aditya_d_sharma profile

What Is Web Cache Poisoning? How Can a Cached Response Become a Security Problem?

#architecture #cybersecurity #performance #security
2
Comments 2
5 min read
How to Find Exposed API Keys in Your Git Repository (Before an Attacker Does)
maxxthematepng profile

How to Find Exposed API Keys in Your Git Repository (Before an Attacker Does)

#security #devops #exposedapikeys #gitsecretscanning
Comments 3
5 min read
Running AI-Generated Code Safely: Field Notes on Vercel Sandbox
ahmed_mahmoud360 profile

Running AI-Generated Code Safely: Field Notes on Vercel Sandbox

#vercel #ai #node #security
Comments
5 min read
My Chrome Extensions Can Read the Page — So I Designed Them Not to Send It Anywhere
k-wada profile

My Chrome Extensions Can Read the Page — So I Designed Them Not to Send It Anywhere

#chromeextension #privacy #webdev #security
Comments 1
5 min read
WebAssembly Component Model in Go Backends: Sandboxed Plugin Execution, Host ABI Design, and the Isolation Tradeoff
neeraj_singhi_golang profile

WebAssembly Component Model in Go Backends: Sandboxed Plugin Execution, Host ABI Design, and the Isolation Tradeoff

#architecture #backend #security #webassembly
Comments 2
7 min read
The audit confirmed the generator existed. It did — and it was never called
sergeipalii profile

The audit confirmed the generator existed. It did — and it was never called

#security #bitcoin #programming #crypto
1
Comments
6 min read
Inside `oblien/openship`: A Practical Look at Self-Hosted Deployment Control
james_lin profile

Inside `oblien/openship`: A Practical Look at Self-Hosted Deployment Control

#ai #devops #docker #security
Comments
2 min read
Ollama Has No API Authentication: How To Properly Gate Port 11434
john_182319291 profile
John

Ollama Has No API Authentication: How To Properly Gate Port 11434

#ollama #security #selfhosted #llm
2
Comments 1
14 min read
MCP Prompt Injection Before the First Tool Call
webofmike profile

MCP Prompt Injection Before the First Tool Call

#mcp #ai #security #agents
2
Comments 4
9 min read
Fixing AI Agent Supply Chain Attack: Node.js Blueprint
umair24171 profile

Fixing AI Agent Supply Chain Attack: Node.js Blueprint

#aiagents #node #security #supplychain
Comments 2
8 min read
Wiping EXIF Metadata Before Publishing Open Source Projects
livrasand profile

Wiping EXIF Metadata Before Publishing Open Source Projects

#privacy #git #github #security
1
Comments 5
3 min read
I built a prompt injection firewall in Rust. It scans in 12 microseconds.
tim860 profile
Tim

I built a prompt injection firewall in Rust. It scans in 12 microseconds.

#rust #security #python #llm
1
Comments 30
4 min read
Debugging SAML SSO: How to Decode a SAMLResponse (and Why It's Sometimes Not XML)
pjanderson profile

Debugging SAML SSO: How to Decode a SAMLResponse (and Why It's Sometimes Not XML)

#authentication #debugging #security
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.