DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Checking your Nextcloud from the outside: version, support end, exposed paths

Checking your Nextcloud from the outside: version, support end, exposed paths

Comments
2 min read
How to Plan Observe Only Testing for WAF Protection

How to Plan Observe Only Testing for WAF Protection

Comments
4 min read
AetherScope V2.2.1 — Cockpit Spatial WebGL 2 SAST

AetherScope V2.2.1 — Cockpit Spatial WebGL 2 SAST

Comments
2 min read
The Doorman Workshop: Keeping a Model Key Off the Client

The Doorman Workshop: Keeping a Model Key Off the Client

Comments
6 min read
How to Read a Smart Contract Audit Report: 10 Checks Before Trusting the Badge

How to Read a Smart Contract Audit Report: 10 Checks Before Trusting the Badge

Comments
3 min read
Policy as Code (OPA, Gatekeeper & Kyverno)

Policy as Code (OPA, Gatekeeper & Kyverno)

Comments
8 min read
jsDelivr handed out the hijacked axios 940,000 times

jsDelivr handed out the hijacked axios 940,000 times

Comments 1
5 min read
Hot-loading a regex word list from a website into a production API without getting ReDoS'd

Hot-loading a regex word list from a website into a production API without getting ReDoS'd

Comments
7 min read
I hardened my first Express auth API: Helmet, CORS and rate limiting

I hardened my first Express auth API: Helmet, CORS and rate limiting

Comments
4 min read
How to look inside a suspicious .exe without uploading it anywhere

How to look inside a suspicious .exe without uploading it anywhere

Comments 1
3 min read
Gokapi API keys and OIDC sessions need different review paths

Gokapi API keys and OIDC sessions need different review paths

Comments
3 min read
Multi-Agent Safety: Designing Recipient Allowlists and Human-in-the-Loop Approval Holds in TypeScript

Multi-Agent Safety: Designing Recipient Allowlists and Human-in-the-Loop Approval Holds in TypeScript

Comments
3 min read
How SHIFROM carries its relay connection inside VLESS+REALITY

How SHIFROM carries its relay connection inside VLESS+REALITY

Comments
8 min read
Gaming Signup Flow — Scoped Key and Welcome Email Contracts That Survive Migration

Gaming Signup Flow — Scoped Key and Welcome Email Contracts That Survive Migration

Comments
7 min read
WeTTY puts the authentication boundary in front of a browser terminal

WeTTY puts the authentication boundary in front of a browser terminal

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.