DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Verifying Webhook Signatures by Hand: HMAC-SHA256 and Why Yours Keeps Failing

Verifying Webhook Signatures by Hand: HMAC-SHA256 and Why Yours Keeps Failing

Comments
4 min read
gate.cat: a deterministic, fail-closed veto that stops AI coding agents before rm -rf

gate.cat: a deterministic, fail-closed veto that stops AI coding agents before rm -rf

Comments 5
2 min read
TOTP Secrets Are a Liability: Meet PPS, an Asymmetric Authentication Protocol for PHP and Laravel

TOTP Secrets Are a Liability: Meet PPS, an Asymmetric Authentication Protocol for PHP and Laravel

1
Comments
6 min read
Tamper-Resistant Test Design Is What the Suite Now Owes the Codebase

Tamper-Resistant Test Design Is What the Suite Now Owes the Codebase

1
Comments
13 min read
Post-Quantum DNS and TLS: What ML-DSA Means for Your Site

Post-Quantum DNS and TLS: What ML-DSA Means for Your Site

Comments
7 min read
Block SSRF Redirect Chains Before Your URL Fetcher Reaches Private Networks

Block SSRF Redirect Chains Before Your URL Fetcher Reaches Private Networks

Comments
4 min read
Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

Why Cursor Keeps Using Math.random() for Session Tokens (CWE-330)

Comments
2 min read
DeepSeek Community Issue Tracker – Now Live on DEV Community 🚀

DeepSeek Community Issue Tracker – Now Live on DEV Community 🚀

Comments
6 min read
DeepSeek: The Good, The Bad, and The Bounty đź§ đź’¸

DeepSeek: The Good, The Bad, and The Bounty đź§ đź’¸

Comments
4 min read
Test Whether Mobile Backup Restores Data Without Restoring Its Key

Test Whether Mobile Backup Restores Data Without Restoring Its Key

Comments
3 min read
The Software Still Has to Be Right: Review Is No Longer Enough

The Software Still Has to Be Right: Review Is No Longer Enough

Comments
14 min read
Building a Transparent Password Strength Checker

Building a Transparent Password Strength Checker

Comments
3 min read
Screen Every Inbound Call at the Carrier Edge: A Fraud Firewall in 178 Lines of Python

Screen Every Inbound Call at the Carrier Edge: A Fraud Firewall in 178 Lines of Python

Comments
4 min read
The Spend-Limit Bug That Hides in Pending Operations

The Spend-Limit Bug That Hides in Pending Operations

1
Comments
2 min read
Strip GPS and EXIF From a Whole Folder of Photos Before You Publish (Local, No Upload)

Strip GPS and EXIF From a Whole Folder of Photos Before You Publish (Local, No Upload)

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.