DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Building My Home SOC: Why I'm Documenting the Journey Instead of Chasing Tutorials

Building My Home SOC: Why I'm Documenting the Journey Instead of Chasing Tutorials

Comments
2 min read
I found a duplicate-charge bug in an MCP tool via static analysis — here's the finding and the fix (NEXUM-004)

I found a duplicate-charge bug in an MCP tool via static analysis — here's the finding and the fix (NEXUM-004)

1
Comments 3
2 min read
Vibe Coding Reality Check: 41% More Bugs, 2.74x Flaws

Vibe Coding Reality Check: 41% More Bugs, 2.74x Flaws

3
Comments
7 min read
Your AI built something private. A public link is the wrong way to share it.

Your AI built something private. A public link is the wrong way to share it.

1
Comments
4 min read
I Built a Disposable Email Service on Cloudflare Workers + Upstash Redis. Here's the Architecture.

I Built a Disposable Email Service on Cloudflare Workers + Upstash Redis. Here's the Architecture.

Comments
3 min read
API Key Rotation Without Downtime: Patterns and Implementation

API Key Rotation Without Downtime: Patterns and Implementation

Comments
5 min read
The Suite Was Green. Four Binding Controls Hadn't Established Their Claims.

The Suite Was Green. Four Binding Controls Hadn't Established Their Claims.

20
Comments 8
15 min read
AI database agents need review queues, not just approval buttons

AI database agents need review queues, not just approval buttons

1
Comments
1 min read
"My MCP Tool's Docstring Promised 'limit: 1-100.' Passing -1 Returned Almost Everything, Not Nothing."

"My MCP Tool's Docstring Promised 'limit: 1-100.' Passing -1 Returned Almost Everything, Not Nothing."

2
Comments 1
4 min read
What the GitHub Outage Taught Us About Authentication Retries

What the GitHub Outage Taught Us About Authentication Retries

Comments
3 min read
HMAC Secrets Explained: Authentication You Can Actually Implement

HMAC Secrets Explained: Authentication You Can Actually Implement

5
Comments
6 min read
I built the first OSS federated threat-intel feed for LLM prompt injection. Here's how it works — and why no one else did.

I built the first OSS federated threat-intel feed for LLM prompt injection. Here's how it works — and why no one else did.

Comments
6 min read
Understanding CORS Preflight Requests

Understanding CORS Preflight Requests

Comments
2 min read
The Gate That Expires After One Message

The Gate That Expires After One Message

Comments
6 min read
E-signing without accounts: designing signatures that are anonymous but still hold up

E-signing without accounts: designing signatures that are anonymous but still hold up

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.