DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part

TCP-AO strengthens BGP sessions, but key lifecycle remains the hard part

Comments
2 min read
Is My Cheap 128 GB SD Card Fake? How to Test a Memory Card Before It Goes in an Offline Phone Security Camera

Is My Cheap 128 GB SD Card Fake? How to Test a Memory Card Before It Goes in an Offline Phone Security Camera

Comments
8 min read
Network Block Device exposure puts storage access before application login

Network Block Device exposure puts storage access before application login

Comments
2 min read
Keycloak CVE-2026-117691: How a SAML Signature Bypass Skips Authentication

Keycloak CVE-2026-117691: How a SAML Signature Bypass Skips Authentication

Comments
3 min read
Securing Multi-Tenant Kubernetes on AWS: mTLS, Network Policies, and Real Isolation

Securing Multi-Tenant Kubernetes on AWS: mTLS, Network Policies, and Real Isolation

Comments
3 min read
Seven Security Checks Before Extraction with ZipFlow

Seven Security Checks Before Extraction with ZipFlow

Comments
1 min read
Detecting and Patching Log4j (Log4Shell): A Practical Playbook

Detecting and Patching Log4j (Log4Shell): A Practical Playbook

Comments
2 min read
PHP2Shell and PHP 8.2 End of Life: What to Do With Your Client WordPress Sites Before 2027

PHP2Shell and PHP 8.2 End of Life: What to Do With Your Client WordPress Sites Before 2027

Comments 1
12 min read
ss Showed 0.0.0.0:3000 and No Process Name. It Was a Docker Container on Every Interface.

ss Showed 0.0.0.0:3000 and No Process Name. It Was a Docker Container on Every Interface.

1
Comments
5 min read
Floating Versions Are an Open Door: Pin Your Actions and Dependencies

Floating Versions Are an Open Door: Pin Your Actions and Dependencies

3
Comments
5 min read
The first hour after a token launch: a Telegram lockdown checklist

The first hour after a token launch: a Telegram lockdown checklist

Comments
2 min read
Hash Generator: When sha256sum -c Says FAILED but the Tarball Is Fine

Hash Generator: When sha256sum -c Says FAILED but the Tarball Is Fine

Comments
5 min read
FTPS can protect the login and still leave the file transfer exposed

FTPS can protect the login and still leave the file transfer exposed

Comments
2 min read
Dovecot splits authentication from mailbox identity for a reason

Dovecot splits authentication from mailbox identity for a reason

Comments
2 min read
Padloc self-hosting moves server policy and recovery into your hands

Padloc self-hosting moves server policy and recovery into your hands

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.