DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Silent nginx Config Bugs That Pass nginx -t: if, location, add_header, alias

Silent nginx Config Bugs That Pass nginx -t: if, location, add_header, alias

6
Comments 10
13 min read
The Quiet Risk in How Most Banks Store Customer Documents, and How NestJS Handles It Properly

The Quiet Risk in How Most Banks Store Customer Documents, and How NestJS Handles It Properly

1
Comments 2
4 min read
AWS Secrets Manager in .NET: How To Load Your Secrets Straight into IConfiguration

AWS Secrets Manager in .NET: How To Load Your Secrets Straight into IConfiguration

Comments
6 min read
Why Cursor's CORS Fix Opens Your API to Any Website (CWE-942)

Why Cursor's CORS Fix Opens Your API to Any Website (CWE-942)

Comments
3 min read
AutoJack: One Web Page Turns a Local AI Agent Into Host Code Execution

AutoJack: One Web Page Turns a Local AI Agent Into Host Code Execution

Comments
4 min read
This endpoint has auth. The tests are green. It still lets a user hand themselves admin.

This endpoint has auth. The tests are green. It still lets a user hand themselves admin.

1
Comments 2
3 min read
I built a Chrome extension that catches every dark pattern trick on shopping sites. Here's exactly how.

I built a Chrome extension that catches every dark pattern trick on shopping sites. Here's exactly how.

Comments
4 min read
I Evaluated 6 AI Workspace Platforms for 90 Days. Here Is the Unfiltered Version.

I Evaluated 6 AI Workspace Platforms for 90 Days. Here Is the Unfiltered Version.

Comments 1
6 min read
Defense in Depth for an Agent That Will Definitely Screw Up

Defense in Depth for an Agent That Will Definitely Screw Up

Comments
5 min read
The wristband problem

The wristband problem

Comments 1
5 min read
La Compatibilidad Que No Me HabĂ­a Ganado

La Compatibilidad Que No Me HabĂ­a Ganado

1
Comments
7 min read
MythX shut down in March and nothing replaced it so I built something

MythX shut down in March and nothing replaced it so I built something

Comments
2 min read
Two credentials, two threat models: auth for a content API

Two credentials, two threat models: auth for a content API

2
Comments
5 min read
Beyond Passkeys and OTP: Why I Built a Protocol for the Authentication Gaps We Keep Ignoring

Beyond Passkeys and OTP: Why I Built a Protocol for the Authentication Gaps We Keep Ignoring

1
Comments
6 min read
TOTP Secrets Are a Liability: Meet PPS, an Asymmetric Authentication Protocol for PHP and Laravel

TOTP Secrets Are a Liability: Meet PPS, an Asymmetric Authentication Protocol for PHP and Laravel

1
Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.