DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I killed my in-app AI chat, made the agent a first-class user, and made every move it makes auditable

I killed my in-app AI chat, made the agent a first-class user, and made every move it makes auditable

2
Comments
6 min read
Broken Access Control in Laravel — Why Being Logged In Isn't Enough

Broken Access Control in Laravel — Why Being Logged In Isn't Enough

Comments
7 min read
I got offered a Web3 job on LinkedIn. The "codebase" was built to rob me.

I got offered a Web3 job on LinkedIn. The "codebase" was built to rob me.

1
Comments
7 min read
Shared agent memory does not mean shared secrets

Shared agent memory does not mean shared secrets

Comments
1 min read
Password Reset Email Deliverability: Domains, DKIM, Bounces, and Suppression Lists

Password Reset Email Deliverability: Domains, DKIM, Bounces, and Suppression Lists

Comments
5 min read
AI Models Keep Escaping Sandboxes. First OpenAI. Then Anthropic. Now Kimi.

AI Models Keep Escaping Sandboxes. First OpenAI. Then Anthropic. Now Kimi.

5
Comments 3
5 min read
Building ATLOCK — an NTFS-ACL file locker, an AES vault, and a keyboard-hook lockdown, all in one Python .exe

Building ATLOCK — an NTFS-ACL file locker, an AES vault, and a keyboard-hook lockdown, all in one Python .exe

7
Comments
3 min read
PREDICTION-20260801-0010

PREDICTION-20260801-0010

Comments
4 min read
A package binding needs a real Reference

A package binding needs a real Reference

Comments
2 min read
We Ditched CAPTCHA and SMS for Proof of Work. Here's Why Your Agent Can't Use Email.

We Ditched CAPTCHA and SMS for Proof of Work. Here's Why Your Agent Can't Use Email.

Comments
6 min read
Shrinking the Blast Radius of Our Identity Plane: Deploy Keycloak on AWS ECS Fargate with Terraform

Shrinking the Blast Radius of Our Identity Plane: Deploy Keycloak on AWS ECS Fargate with Terraform

Comments
8 min read
The Bug That Proved My Own Point: A Post-Mortem on TSA Verification

The Bug That Proved My Own Point: A Post-Mortem on TSA Verification

Comments
3 min read
Zero-Latency Security: Next.js Edge Middleware 🛡️

Zero-Latency Security: Next.js Edge Middleware 🛡️

Comments
4 min read
A signature declaration needs one home

A signature declaration needs one home

Comments
3 min read
Hugging Face's CEO Wants Mandatory AI Agent Disclosure. He Just Described What the Industry Is Missing.

Hugging Face's CEO Wants Mandatory AI Agent Disclosure. He Just Described What the Industry Is Missing.

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.