DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Validate Telegram Mini App initData in PHP: HMAC-SHA-256, timing-safe compare, and auth_date expiry

Validate Telegram Mini App initData in PHP: HMAC-SHA-256, timing-safe compare, and auth_date expiry

Comments 1
4 min read
Safer Email Change Flows Start With Proof

Safer Email Change Flows Start With Proof

1
Comments 1
4 min read
Agent Security Attack Surface Analysis: A Risk Map and Defense Playbook

Agent Security Attack Surface Analysis: A Risk Map and Defense Playbook

2
Comments 2
8 min read
What Is a JWT? JSON Web Tokens Explained Simply

What Is a JWT? JSON Web Tokens Explained Simply

Comments 1
3 min read
Your CI Pipeline Has a Security Gap That Isn't a Vulnerability

Your CI Pipeline Has a Security Gap That Isn't a Vulnerability

1
Comments
8 min read
I tried to prove AI writes insecure WordPress code. 32 runs later, I could not.

I tried to prove AI writes insecure WordPress code. 32 runs later, I could not.

Comments
6 min read
حارس ويب: أول أداة أمن سيبراني عربية سويتها كطالب ثانوي

حارس ويب: أول أداة أمن سيبراني عربية سويتها كطالب ثانوي

Comments
1 min read
Deal-scoped PASETO: three things I got wrong about audience-bound tokens

Deal-scoped PASETO: three things I got wrong about audience-bound tokens

Comments 3
9 min read
Your Free AI Platform Trial Is a Trade, Not a Gift: A 5-Gate Decision Framework

Your Free AI Platform Trial Is a Trade, Not a Gift: A 5-Gate Decision Framework

1
Comments
5 min read
Authentication & Authorization — JWT & OAuth 2.0

Authentication & Authorization — JWT & OAuth 2.0

1
Comments
2 min read
How to read a DMARC aggregate report without losing your mind

How to read a DMARC aggregate report without losing your mind

Comments
4 min read
`@bananacool467/ui-tools` 0.2.1-beta: The Terminal Security Model Has Changed Again

`@bananacool467/ui-tools` 0.2.1-beta: The Terminal Security Model Has Changed Again

1
Comments
3 min read
Bot timing has an entropy signature, and you can measure it on live Nostr data

Bot timing has an entropy signature, and you can measure it on live Nostr data

1
Comments
4 min read
Someone Can Get an SSL Certificate for Your Domain. CT Logs Are How You Find Out.

Someone Can Get an SSL Certificate for Your Domain. CT Logs Are How You Find Out.

1
Comments
6 min read
856,168 differential checks later: what it actually takes to delete your dependencies

856,168 differential checks later: what it actually takes to delete your dependencies

15
Comments 3
10 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.