DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Are We Sending Too Much Data to LLMs? Agentic Production Support (APS)

Are We Sending Too Much Data to LLMs? Agentic Production Support (APS)

Comments
2 min read
The Anatomy of a CI/CD Secrets Dump: DevSecOps Analysis, Attack Vectors, and GitHub Actions Hardening

The Anatomy of a CI/CD Secrets Dump: DevSecOps Analysis, Attack Vectors, and GitHub Actions Hardening

Comments
7 min read
Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat

Vulnerability advisories grew 2.3x-6.6x in 5 years; open-source tool count stayed flat

Comments
4 min read
Pentest-Kit: A Lightweight Go-Based Network Scanner

Pentest-Kit: A Lightweight Go-Based Network Scanner

Comments
3 min read
We Were Hitting Auth0 /userinfo on Every Request. Here's the Fix.

We Were Hitting Auth0 /userinfo on Every Request. Here's the Fix.

Comments
6 min read
Your Cargo.lock Diff Is Also a Permission Diff

Your Cargo.lock Diff Is Also a Permission Diff

Comments
4 min read
Building a TLS Fingerprinting Tool with Go (JA3/JA4)

Building a TLS Fingerprinting Tool with Go (JA3/JA4)

Comments
6 min read
GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles

GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles

Comments
2 min read
Checking 800M Leaked Passwords in 2MB of RAM with Bloom Filters

Checking 800M Leaked Passwords in 2MB of RAM with Bloom Filters

Comments
4 min read
Before You Sign: How to Audit an AI Vendor's Data Practices

Before You Sign: How to Audit an AI Vendor's Data Practices

1
Comments
3 min read
NETO: Chat P2P local para equipos dev sin depender de la nube

NETO: Chat P2P local para equipos dev sin depender de la nube

Comments 1
1 min read
SPF record hygiene: the security debt nobody logs

SPF record hygiene: the security debt nobody logs

Comments
5 min read
I Brought IdentityServer Back to Life as Open Source (.NET 8)

I Brought IdentityServer Back to Life as Open Source (.NET 8)

Comments
1 min read
Debugging 4 Password Reset Email Failures (Requests, Domains, Templates, Payloads)

Debugging 4 Password Reset Email Failures (Requests, Domains, Templates, Payloads)

Comments
8 min read
Why I Built a Zero-Knowledge, Client-Side Encrypted Burning Note App Over the Weekend

Why I Built a Zero-Knowledge, Client-Side Encrypted Burning Note App Over the Weekend

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.