DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
JWT access + refresh tokens in ASP.NET Core (.NET 10): rotation, revocation and the bugs to avoid

JWT access + refresh tokens in ASP.NET Core (.NET 10): rotation, revocation and the bugs to avoid

Comments
6 min read
Subresource Integrity (SRI): Pin Your CDN Scripts

Subresource Integrity (SRI): Pin Your CDN Scripts

Comments
7 min read
How to protect your plugin or app from piracy, step by step

How to protect your plugin or app from piracy, step by step

Comments 2
5 min read
Why We Put a Physical Geofence on Our AI SRE Agent Before Giving It Production Access

Why We Put a Physical Geofence on Our AI SRE Agent Before Giving It Production Access

Comments
5 min read
Artex Hacking Tool Found Exposed on Hundreds of Public Servers

Artex Hacking Tool Found Exposed on Hundreds of Public Servers

Comments
2 min read
Mongo Express: 11,349 Title Matches and the UI-to-Database Credential Split

Mongo Express: 11,349 Title Matches and the UI-to-Database Credential Split

Comments
2 min read
Why You Should Never Store Passwords in Plain Text: A Practical Guide to Hashing and Salting

Why You Should Never Store Passwords in Plain Text: A Practical Guide to Hashing and Salting

1
Comments
4 min read
My SOC triage model had 0 false escalations. On real alerts it had 39 out of 100.

My SOC triage model had 0 false escalations. On real alerts it had 39 out of 100.

Comments
4 min read
What a WordPress Backup Really Costs: A Budget Worksheet for Small Sites and Agencies

What a WordPress Backup Really Costs: A Budget Worksheet for Small Sites and Agencies

Comments 1
14 min read
Secure File Export for Authenticated Customers — Temporary Links Without Public Objects

Secure File Export for Authenticated Customers — Temporary Links Without Public Objects

Comments
7 min read
I scanned 35 real SKILL.md files — 16 tripped a rule, 10 of them Anthropic's official skills

I scanned 35 real SKILL.md files — 16 tripped a rule, 10 of them Anthropic's official skills

Comments
3 min read
6 review rules for auth and base-image config after the Alpine OpenSSH password bypass in 2026

6 review rules for auth and base-image config after the Alpine OpenSSH password bypass in 2026

Comments
9 min read
Go 1.27 Adds crypto/mldsa. A Post-Quantum Signature Is 3,309 Bytes; Ed25519's Is 64

Go 1.27 Adds crypto/mldsa. A Post-Quantum Signature Is 3,309 Bytes; Ed25519's Is 64

1
Comments 1
8 min read
Why Drawing a Black Box on a PDF Doesn't Redact It (And How I Built a True Client-Side PDF Redactor with Canvas & WebAssembly)

Why Drawing a Black Box on a PDF Doesn't Redact It (And How I Built a True Client-Side PDF Redactor with Canvas & WebAssembly)

Comments
2 min read
WordPress shipped the patch a week ago, and CISA now wants you to check whether anyone already got in

WordPress shipped the patch a week ago, and CISA now wants you to check whether anyone already got in

Comments
8 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.