DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Safer OAuth Device Sign-In Emails

Safer OAuth Device Sign-In Emails

1
Comments
4 min read
How Do You Log Someone Out of a Stateless System? JWT Invalidation on Logout

How Do You Log Someone Out of a Stateless System? JWT Invalidation on Logout

Comments
6 min read
I'm building Osquil, a schema-aware query workbench for osquery

I'm building Osquil, a schema-aware query workbench for osquery

Comments
3 min read
GitHub Actions OIDC: Eliminating Long-Lived Credentials from Your CI/CD Pipeline

GitHub Actions OIDC: Eliminating Long-Lived Credentials from Your CI/CD Pipeline

Comments
3 min read
A regression gate cannot see an already stale signature boundary

A regression gate cannot see an already stale signature boundary

Comments 1
2 min read
How to Find Hidden Programs Running on Windows (Before They Become a Security Problem)

How to Find Hidden Programs Running on Windows (Before They Become a Security Problem)

Comments
4 min read
my AI-code language is now honest all the way down to WebAssembly

my AI-code language is now honest all the way down to WebAssembly

Comments
10 min read
Configuring DMARC p=quarantine: A Technical Step-by-Step Guide to Secure Your Domain and Improve Deliverability

Configuring DMARC p=quarantine: A Technical Step-by-Step Guide to Secure Your Domain and Improve Deliverability

Comments
5 min read
Authentication in Modern SaaS: Passwordless & Multi-Tenant Patterns

Authentication in Modern SaaS: Passwordless & Multi-Tenant Patterns

1
Comments
5 min read
atob() can't decode a JWT — the Base64URL gotcha (and the fix)

atob() can't decode a JWT — the Base64URL gotcha (and the fix)

1
Comments
3 min read
Capturing Your First Web Request with Wireshark on Windows

Capturing Your First Web Request with Wireshark on Windows

Comments
2 min read
Blocking an AI agent's tool call before it runs: runtime verification with LTL3

Blocking an AI agent's tool call before it runs: runtime verification with LTL3

1
Comments 2
4 min read
Your MCP write returned 200. Did the right thing actually happen?

Your MCP write returned 200. Did the right thing actually happen?

6
Comments 3
9 min read
TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense Neutralization

Comments
5 min read
UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extortion via Notification Deletion

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.