DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Linux Process Evasion: ptrace & prctl

Linux Process Evasion: ptrace & prctl

Comments
3 min read
A PHP login form that won't get you owned

A PHP login form that won't get you owned

Comments
3 min read
The latestRoundData() Footgun That Drained Two DeFi Protocols for $19.5M

The latestRoundData() Footgun That Drained Two DeFi Protocols for $19.5M

7
Comments
6 min read
The gate for an agent belongs in the environment, not in the agent

The gate for an agent belongs in the environment, not in the agent

1
Comments 5
2 min read
Where the guardrail lives

Where the guardrail lives

1
Comments
2 min read
When Backward Compat Defends the Bug

When Backward Compat Defends the Bug

1
Comments
2 min read
Read your own GitHub Actions secret back (when base64 gets masked too)

Read your own GitHub Actions secret back (when base64 gets masked too)

Comments
2 min read
What Building a Shopify Integration Taught Me About Trusting External APIs

What Building a Shopify Integration Taught Me About Trusting External APIs

1
Comments
4 min read
Why We Open-Sourced the Encryption Architecture Behind RozVibe

Why We Open-Sourced the Encryption Architecture Behind RozVibe

2
Comments 2
3 min read
Your AI agent's leak risk depends more on the model than the prompt

Your AI agent's leak risk depends more on the model than the prompt

Comments
5 min read
Firebase PWA Security Audit: XSS via innerHTML, Hardcoded Credentials and a Custom Token Migration

Firebase PWA Security Audit: XSS via innerHTML, Hardcoded Credentials and a Custom Token Migration

2
Comments 3
7 min read
Reading a Verified Contract You Didn't Write: A Systematic Approach

Reading a Verified Contract You Didn't Write: A Systematic Approach

1
Comments
3 min read
Data, Context & RAG Lineage Governance for Enterprise AI Agents

Data, Context & RAG Lineage Governance for Enterprise AI Agents

11
Comments
5 min read
Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Securing Apps: Password Hashing, RBAC, OAuth, and OpenID Connect

Comments
17 min read
Nobody Writes Bad Crypto. They Write Correct Crypto at Four Layers.

Nobody Writes Bad Crypto. They Write Correct Crypto at Four Layers.

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.