DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
I audited AI-built Supabase apps. These are the security bugs I keep finding

I audited AI-built Supabase apps. These are the security bugs I keep finding

Comments 1
2 min read
Presigned URL vs Proxy Uploads: Cost, Latency, and Security for Web Apps in 2026

Presigned URL vs Proxy Uploads: Cost, Latency, and Security for Web Apps in 2026

Comments
5 min read
Hinton Warns AI Could Disrupt Power and Finance: He Calls for Independent Testing Before Release

Hinton Warns AI Could Disrupt Power and Finance: He Calls for Independent Testing Before Release

Comments
5 min read
Proxmox Backup Server: map datastore paths before trusting API tokens

Proxmox Backup Server: map datastore paths before trusting API tokens

Comments
3 min read
Private Document Downloads: Signed URLs, Egress Cost, and Provider Trade-offs

Private Document Downloads: Signed URLs, Egress Cost, and Provider Trade-offs

Comments
4 min read
What a large test suite actually buys a bot with a wallet

What a large test suite actually buys a bot with a wallet

Comments
3 min read
Classroom Session End — Revoke Tokens Before Notification Cleanup and Attendance Recording

Classroom Session End — Revoke Tokens Before Notification Cleanup and Attendance Recording

Comments
8 min read
'Dubious Ownership': The 2022 Git CVE Behind the Error Your Agent's Container Hits

'Dubious Ownership': The 2022 Git CVE Behind the Error Your Agent's Container Hits

Comments
9 min read
I ran my Supabase + Stripe security scanner on two popular starters. It was wrong 7 times.

I ran my Supabase + Stripe security scanner on two popular starters. It was wrong 7 times.

Comments
4 min read
Your messenger is end-to-end encrypted. Its server still knows who you talk to. I tried to fix that.

Your messenger is end-to-end encrypted. Its server still knows who you talk to. I tried to fix that.

Comments
4 min read
One exclamation mark switched off the check: forged alarm acknowledgements in OpenNMS (CVE-2026-19182)

One exclamation mark switched off the check: forged alarm acknowledgements in OpenNMS (CVE-2026-19182)

Comments
6 min read
What Happens After an AI Agent Pays? x402, Stablecoins, Settlement Evidence, and SAAX

What Happens After an AI Agent Pays? x402, Stablecoins, Settlement Evidence, and SAAX

Comments
6 min read
Your AI Agent's Allowlist Is a Secret Store: Find and Fix Credentials Leaked Through Agent Config Files

Your AI Agent's Allowlist Is a Secret Store: Find and Fix Credentials Leaked Through Agent Config Files

Comments
8 min read
401 vs 403 in your Node API logs: what each pattern means

401 vs 403 in your Node API logs: what each pattern means

Comments
4 min read
Agentic Commerce Protocols in November 2026: A Verified Map of ACP, AP2, UCP, x402, MCP, A2A - and Where a Commitment Layer Fits

Agentic Commerce Protocols in November 2026: A Verified Map of ACP, AP2, UCP, x402, MCP, A2A - and Where a Commitment Layer Fits

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.