DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Running AI-Generated Code Safely: Field Notes on Vercel Sandbox
ahmed_mahmoud360 profile

Running AI-Generated Code Safely: Field Notes on Vercel Sandbox

#vercel #ai #node #security
Comments
5 min read
How to Find Exposed API Keys in Your Git Repository (Before an Attacker Does)
maxxthematepng profile

How to Find Exposed API Keys in Your Git Repository (Before an Attacker Does)

#security #devops #exposedapikeys #gitsecretscanning
Comments 3
5 min read
Ollama Has No API Authentication: How To Properly Gate Port 11434
john_182319291 profile
John

Ollama Has No API Authentication: How To Properly Gate Port 11434

#ollama #security #selfhosted #llm
2
Comments 1
14 min read
WebAssembly Component Model in Go Backends: Sandboxed Plugin Execution, Host ABI Design, and the Isolation Tradeoff
neeraj_singhi_golang profile

WebAssembly Component Model in Go Backends: Sandboxed Plugin Execution, Host ABI Design, and the Isolation Tradeoff

#architecture #backend #security #webassembly
Comments 2
7 min read
Inside `oblien/openship`: A Practical Look at Self-Hosted Deployment Control
james_lin profile

Inside `oblien/openship`: A Practical Look at Self-Hosted Deployment Control

#ai #devops #docker #security
Comments
2 min read
The audit confirmed the generator existed. It did — and it was never called
sergeipalii profile

The audit confirmed the generator existed. It did — and it was never called

#security #bitcoin #programming #crypto
1
Comments
6 min read
My Chrome Extensions Can Read the Page — So I Designed Them Not to Send It Anywhere
k-wada profile

My Chrome Extensions Can Read the Page — So I Designed Them Not to Send It Anywhere

#chromeextension #privacy #webdev #security
Comments 1
5 min read
MCP Prompt Injection Before the First Tool Call
webofmike profile

MCP Prompt Injection Before the First Tool Call

#mcp #ai #security #agents
2
Comments 4
9 min read
Fixing AI Agent Supply Chain Attack: Node.js Blueprint
umair24171 profile

Fixing AI Agent Supply Chain Attack: Node.js Blueprint

#aiagents #node #security #supplychain
Comments 2
8 min read
Wiping EXIF Metadata Before Publishing Open Source Projects
livrasand profile

Wiping EXIF Metadata Before Publishing Open Source Projects

#privacy #git #github #security
1
Comments 5
3 min read
I built a prompt injection firewall in Rust. It scans in 12 microseconds.
tim860 profile
Tim

I built a prompt injection firewall in Rust. It scans in 12 microseconds.

#rust #security #python #llm
1
Comments 30
4 min read
Debugging SAML SSO: How to Decode a SAMLResponse (and Why It's Sometimes Not XML)
pjanderson profile

Debugging SAML SSO: How to Decode a SAMLResponse (and Why It's Sometimes Not XML)

#authentication #debugging #security
Comments
4 min read
Benchmarking My MCP Security Scanner: 14 of 14 Findings, Zero False Positives
kielltampubolon profile

Benchmarking My MCP Security Scanner: 14 of 14 Findings, Zero False Positives

#security #python #testing #mcp
Comments 1
2 min read
How to Use CloudTrail to Check Whether You Were Affected by the AWS SSM Agent Vulnerability (CVE-2026-89049)
nishikawaakira profile

How to Use CloudTrail to Check Whether You Were Affected by the AWS SSM Agent Vulnerability (CVE-2026-89049)

#aws #cloudtrail #security
2
Comments
4 min read
One rounding, not many: why a provably-fair verifier must match the server bit for bit
betkyo profile

One rounding, not many: why a provably-fair verifier must match the server bit for bit

#cryptography #javascript #math #security
Comments 2
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.