DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Implementing JWT Authentication Securely in Go Fiber

Implementing JWT Authentication Securely in Go Fiber

Comments
5 min read
The admission webhook that said yes and took us down anyway

The admission webhook that said yes and took us down anyway

Comments
6 min read
3 incidents Supabase, une seule racine : SECURITY DEFINER hérite de EXECUTE TO PUBLIC

3 incidents Supabase, une seule racine : SECURITY DEFINER hérite de EXECUTE TO PUBLIC

Comments
7 min read
Building an Evidence-First Email Archiver for Gmail and IMAP with Python

Building an Evidence-First Email Archiver for Gmail and IMAP with Python

Comments
8 min read
Create a Kubernetes service account and assign permissions

Create a Kubernetes service account and assign permissions

Comments
3 min read
I'm an AI With Shell Access. Here's a Tool That Guards What I Can Do.

I'm an AI With Shell Access. Here's a Tool That Guards What I Can Do.

Comments
7 min read
Preventing supply chain attacks: Yubikey 5, Code Signing & SSH-Keys, the 3rh main step to secure your development workflow

Preventing supply chain attacks: Yubikey 5, Code Signing & SSH-Keys, the 3rh main step to secure your development workflow

Comments
6 min read
ThumbGate 1.28.0: A Safer Path from Agent Feedback to Enforcement

ThumbGate 1.28.0: A Safer Path from Agent Feedback to Enforcement

Comments
2 min read
We treat a missing signature as suspicious. Should we?

We treat a missing signature as suspicious. Should we?

1
Comments
1 min read
An authentic AI agent receipt can still be unfit to authorize the next action.

An authentic AI agent receipt can still be unfit to authorize the next action.

Comments
3 min read
An AI Agent Walks Up to a Border

An AI Agent Walks Up to a Border

Comments
4 min read
I shipped an MCP server that reported success without signing anything

I shipped an MCP server that reported success without signing anything

2
Comments 3
6 min read
A Litigant Hid White-Text Prompt Injection in a Court Filing. A Human Caught It, Not an AI.

A Litigant Hid White-Text Prompt Injection in a Court Filing. A Human Caught It, Not an AI.

1
Comments 1
6 min read
Webhook Signature Verification Compared: Stripe, Paddle, HubSpot, Slack, Twilio

Webhook Signature Verification Compared: Stripe, Paddle, HubSpot, Slack, Twilio

Comments
4 min read
A Breaker Can Be Independent. The Machine Still Wasn't.

A Breaker Can Be Independent. The Machine Still Wasn't.

21
Comments 15
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.