DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Gaming Signup Flow — Scoped Key and Welcome Email Contracts That Survive Migration

Gaming Signup Flow — Scoped Key and Welcome Email Contracts That Survive Migration

Comments
7 min read
Ask before you install

Ask before you install

1
Comments 1
7 min read
2026 Avatar Data Handling: Browser Upload URLs and Private Storage Boundaries

2026 Avatar Data Handling: Browser Upload URLs and Private Storage Boundaries

Comments
8 min read
Akamai _abck: the cookie that rewrites itself on every response

Akamai _abck: the cookie that rewrites itself on every response

Comments 1
5 min read
AES-GCM in TypeScript: the 12-byte nonce, the tag, and why your ciphertext won't decrypt on the other side

AES-GCM in TypeScript: the 12-byte nonce, the tag, and why your ciphertext won't decrypt on the other side

Comments
12 min read
SORMAS exposure begins with role rights and REST user privileges

SORMAS exposure begins with role rights and REST user privileges

Comments
3 min read
Chainalysis Says Live Tokens for Every User Were Exposed

Chainalysis Says Live Tokens for Every User Were Exposed

Comments
8 min read
ttyd auth headers and client certificates are different trust paths

ttyd auth headers and client certificates are different trust paths

Comments
3 min read
The $3.5 Trillion Single Point of Failure: Why Hardware Monopolies Always Break at the Human Layer

The $3.5 Trillion Single Point of Failure: Why Hardware Monopolies Always Break at the Human Layer

Comments
2 min read
Little Snitch for Windows: PacketHound Is Free but Ignores Windows Telemetry

Little Snitch for Windows: PacketHound Is Free but Ignores Windows Telemetry

Comments
7 min read
We let an AI red-team our hardware encryption. Here's what it found.

We let an AI red-team our hardware encryption. Here's what it found.

Comments
7 min read
Your face is not a password: designing biometric flows people can trust

Your face is not a password: designing biometric flows people can trust

Comments
5 min read
One memory for security and engineering: linking attackers to our own code

One memory for security and engineering: linking attackers to our own code

Comments
5 min read
Software Reverse Engineering Services Compared: 4 Provider Types

Software Reverse Engineering Services Compared: 4 Provider Types

Comments
6 min read
Voice AI Payments: 14 Data-Exposure Tests Before Any Card Is Entered

Voice AI Payments: 14 Data-Exposure Tests Before Any Card Is Entered

Comments
18 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.