DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Self-Hosted Video Conferencing: 9 Best Platforms

Self-Hosted Video Conferencing: 9 Best Platforms

Comments
39 min read
Avatar Upload Moderation: Review Three Sizes Before Publishing Derivative IDs

Avatar Upload Moderation: Review Three Sizes Before Publishing Derivative IDs

Comments
6 min read
GhostMap: Malformed APK Resources Can Trap Android Devices in a Persistent Boot Loop

GhostMap: Malformed APK Resources Can Trap Android Devices in a Persistent Boot Loop

1
Comments
7 min read
7 controls your LLM demo needs before production

7 controls your LLM demo needs before production

Comments
4 min read
Password-protecting PDFs in JavaScript: what the encryption hides and what it doesn't

Password-protecting PDFs in JavaScript: what the encryption hides and what it doesn't

Comments
4 min read
A one-line password bypass hit Alpine's sshd. I built a 5-condition check that tells you if your images are exposed.

A one-line password bypass hit Alpine's sshd. I built a 5-condition check that tells you if your images are exposed.

Comments
4 min read
Protect the AWS Root Account and Turn on MFA

Protect the AWS Root Account and Turn on MFA

Comments
2 min read
Breached during App Review: what a solo developer checked when the hosting provider was hit

Breached during App Review: what a solo developer checked when the hosting provider was hit

Comments
8 min read
Encrypted Is Not Authenticated: What PostgreSQL sslmode Really Checks

Encrypted Is Not Authenticated: What PostgreSQL sslmode Really Checks

Comments
15 min read
OpenAI's Linux Kernel Research: 948 Unique LPEs and Candidate Patches

OpenAI's Linux Kernel Research: 948 Unique LPEs and Candidate Patches

1
Comments
7 min read
SHIRASAGI: Authenticated OS Command Injection and Stored XSS Fixed in v1.21.1

SHIRASAGI: Authenticated OS Command Injection and Stored XSS Fixed in v1.21.1

1
Comments
8 min read
CWPdoor: cwpsrv Replacement Enables Passive Command Execution via Signed HTTP Headers

CWPdoor: cwpsrv Replacement Enables Passive Command Execution via Signed HTTP Headers

1
Comments
8 min read
Testing Broken Access Control Without Guessing

Testing Broken Access Control Without Guessing

1
Comments
5 min read
Bots flooding your sign-up or contact form

Bots flooding your sign-up or contact form

Comments 3
1 min read
Your Pre-Commit Hooks Don't Exist on the Free Server — Gate the Model's Diff Instead

Your Pre-Commit Hooks Don't Exist on the Free Server — Gate the Model's Diff Instead

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.