DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Vault auth methods — OIDC for humans, Kubernetes for workloads
secopslog profile

Vault auth methods — OIDC for humans, Kubernetes for workloads

#security #devsecops #devops #kubernetes
Comments
4 min read
The Tragedy of the Clean-Handed Auditor
linkbenjamin profile

The Tragedy of the Clean-Handed Auditor

#security #compliance #developers #careerdevelopment
Comments
4 min read
Two npm worms shipped with valid provenance this year
booyaka101 profile

Two npm worms shipped with valid provenance this year

#javascript #security #npm #devops
1
Comments
5 min read
Fable 5 Just Shipped: What Anthropic's Newest Model Means for Developers
pavelespitia profile

Fable 5 Just Shipped: What Anthropic's Newest Model Means for Developers

#ai #webdev #productivity #security
2
Comments
3 min read
Verifying a JWT Signature: HS256 vs RS256 (and What exp Actually Means)
skojiocommunity profile

Verifying a JWT Signature: HS256 vs RS256 (and What exp Actually Means)

#security #jwt #developertools #authentication
Comments
6 min read
Helm template functions, pipelines & named templates
secopslog profile

Helm template functions, pipelines & named templates

#kubernetes #security #devsecops #devops
Comments
4 min read
A prompt injection couldn't beat my AI lead-qualifier. A lazy lie beat it 2 times out of 5.
shipsitself profile

A prompt injection couldn't beat my AI lead-qualifier. A lazy lie beat it 2 times out of 5.

#ai #n8n #security #automation
Comments 1
4 min read
Your Token Is Not Safer in a Cookie. It Is Safer From JavaScript.
ofri-peretz profile

Your Token Is Not Safer in a Cookie. It Is Safer From JavaScript.

#webdev #security #javascript #node
4
Comments 1
4 min read
Every Python rate limiter has this DDoS blind spot — I built one that doesn't
zlynv profile
zlynv

Every Python rate limiter has this DDoS blind spot — I built one that doesn't

#python #webdev #opensource #security
3
Comments 6
4 min read
Migrating from Terraform to OpenTofu, safely
secopslog profile

Migrating from Terraform to OpenTofu, safely

#terraform #devsecops #security #devops
Comments
4 min read
Argo CD sync policies & self-heal, explained
secopslog profile

Argo CD sync policies & self-heal, explained

#kubernetes #security #devsecops #devops
Comments
4 min read
Kustomize bases & overlays — one base, every environment
secopslog profile

Kustomize bases & overlays — one base, every environment

#kubernetes #security #devsecops #devops
Comments
4 min read
Hello DEV! We're Building DoxBar - A Privacy-First Document Toolkit
doxbar profile

Hello DEV! We're Building DoxBar - A Privacy-First Document Toolkit

#doxbar #productivity #security #saas
Comments
3 min read
AWS WAF Challenge : bloquer les bots avant qu’ils n’atteignent l’application
psantus profile

AWS WAF Challenge : bloquer les bots avant qu’ils n’atteignent l’application

#challenge #aws #waf #security
1
Comments 2
8 min read
Your false positives never complain. So how do you find them?
hirajha profile

Your false positives never complain. So how do you find them?

#discuss #webdev #programming #security
Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.