DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Strip Location Data From Your Photos Before Posting — Here's the Browser Tool That Does It

Strip Location Data From Your Photos Before Posting — Here's the Browser Tool That Does It

Comments 1
9 min read
Designing Permission Systems Beyond RBAC (ABAC)

Designing Permission Systems Beyond RBAC (ABAC)

77
Comments
5 min read
Vercel OAuth Compromise via Context.ai: Timeline, IOCs, and Remediation

Vercel OAuth Compromise via Context.ai: Timeline, IOCs, and Remediation

Comments
4 min read
AI guardrails are not security boundaries

AI guardrails are not security boundaries

6
Comments 2
4 min read
Your Hermes agent's audit log is leaking customer emails. Here's a 100-line lib that fixes that.

Hermes Agent Challenge Submission: Write About Hermes Agent

Your Hermes agent's audit log is leaking customer emails. Here's a 100-line lib that fixes that.

1
Comments 2
4 min read
5 Security Mistakes I See on Every Server Audit

5 Security Mistakes I See on Every Server Audit

Comments
2 min read
DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 6: The Full Pipeline

DevSecOps in Practice: Tools That Actually Catch Vulnerabilities - Part 6: The Full Pipeline

1
Comments
4 min read
The Paywall Was a Painted Door

The Paywall Was a Painted Door

4
Comments
18 min read
Agents of Chaos: a field study of 16 agent failures (and refusals)

Agents of Chaos: a field study of 16 agent failures (and refusals)

Comments 1
4 min read
What are managed sandboxes for AI agents?

What are managed sandboxes for AI agents?

Comments
7 min read
Analysis internal data safely with Hermes agent and OneQuery

Analysis internal data safely with Hermes agent and OneQuery

1
Comments
2 min read
How to Check Your MCP Server for CVE-2026-5603's Vulnerability Pattern (And Why shellQuote Isn't Enough)

How to Check Your MCP Server for CVE-2026-5603's Vulnerability Pattern (And Why shellQuote Isn't Enough)

Comments
3 min read
After the Vercel Breach: Rethinking Where Your Auth Secrets Live

After the Vercel Breach: Rethinking Where Your Auth Secrets Live

Comments
5 min read
Cookies vs JWT

Cookies vs JWT

Comments
4 min read
$5.4 Billion in Damage. 8.5 Million Machines Down. Three YAML Controls Would Have Prevented It. Here's the Structural Analysis.

$5.4 Billion in Damage. 8.5 Million Machines Down. Three YAML Controls Would Have Prevented It. Here's the Structural Analysis.

Comments 5
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.