DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
No accounts meant no license server — so my $19 one-time SaaS signs its keys with ECDSA P-256

No accounts meant no license server — so my $19 one-time SaaS signs its keys with ECDSA P-256

Comments
5 min read
The auth check I decided not to write, and the test that keeps it unwritten

The auth check I decided not to write, and the test that keeps it unwritten

Comments
6 min read
Node.js SMS API for US/EU Store Security Alerts (2-Path OTP Fallback)

Node.js SMS API for US/EU Store Security Alerts (2-Path OTP Fallback)

Comments
6 min read
Introduction to the OWASP Top 10: Building Secure Web Applications

Introduction to the OWASP Top 10: Building Secure Web Applications

1
Comments
7 min read
Cloud Security Has No TodoMVC. So We Built One.

Cloud Security Has No TodoMVC. So We Built One.

1
Comments
5 min read
A Matching Checksum Doesn't Prove What You Think: Integrity vs Authenticity

A Matching Checksum Doesn't Prove What You Think: Integrity vs Authenticity

1
Comments
4 min read
Every Trust Number Is a Numerator

Every Trust Number Is a Numerator

2
Comments
6 min read
I Built an Interactive 365-Day Linux & SOC Analyst Master Platform (with Live In-Browser Labs & Threat Intel) 🚀

I Built an Interactive 365-Day Linux & SOC Analyst Master Platform (with Live In-Browser Labs & Threat Intel) 🚀

Comments 1
2 min read
Prompt Injection in Copilot Chatbot — Phishing via Client-Controlled Context

Prompt Injection in Copilot Chatbot — Phishing via Client-Controlled Context

Comments
5 min read
We caught a SQL injection with an offline AI security scanner — here's the exact query it found

We caught a SQL injection with an offline AI security scanner — here's the exact query it found

Comments 1
3 min read
Human Control Cannot Be a Checkbox in an Autonomous Agent System

Human Control Cannot Be a Checkbox in an Autonomous Agent System

4
Comments 1
7 min read
Capacity Planning SMS OTP and Email 2FA (For US/EU Student Report Releases)

Capacity Planning SMS OTP and Email 2FA (For US/EU Student Report Releases)

Comments
8 min read
The URL Looked Public. Playwright Could Still Reach localhost.

The URL Looked Public. Playwright Could Still Reach localhost.

Comments
5 min read
Shipping a Cloud Product? Build Privacy and Contract Risk Into the Architecture

Shipping a Cloud Product? Build Privacy and Contract Risk Into the Architecture

Comments
8 min read
73% of What We Blocked in a Month Was One Syscall Your Sandbox Cannot See

73% of What We Blocked in a Month Was One Syscall Your Sandbox Cannot See

2
Comments 2
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.