DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Codex Was Torching Your SSD and Nobody Noticed for Months

Small files mask massive flash wear

Codex Was Torching Your SSD and Nobody Noticed for Months

11
Comments 9
10 min read
Fine-tuning a 322M Model for Coding Agent Safety: What 3 Runs and 2 Failures Taught Me

Fine-tuning a 322M Model for Coding Agent Safety: What 3 Runs and 2 Failures Taught Me

1
Comments 6
8 min read
Last week in Agent Security Update 5: The Pentagon Prompts

Last week in Agent Security Update 5: The Pentagon Prompts

Comments
13 min read
How to deploy an AI assistant: Pattern 2, the control/data split (customer cloud)

How to deploy an AI assistant: Pattern 2, the control/data split (customer cloud)

Comments
11 min read
To plan or not to plan: the Terraform file that leaked every password we had

To plan or not to plan: the Terraform file that leaked every password we had

3
Comments
7 min read
How to deploy an AI assistant: Pattern 3, the isolated site (on-premises and air-gapped)

How to deploy an AI assistant: Pattern 3, the isolated site (on-premises and air-gapped)

Comments
11 min read
Retrieval Is Not a Safety Boundary: Poisoned-Corpus and Unsupported-Question Evaluation of a RAG Pipeline

Retrieval Is Not a Safety Boundary: Poisoned-Corpus and Unsupported-Question Evaluation of a RAG Pipeline

Comments
7 min read
When Coding Agents Watch GitHub: A Practical Safety Checklist Before They Open PRs

When Coding Agents Watch GitHub: A Practical Safety Checklist Before They Open PRs

Comments 1
7 min read
Goodhart's Law Has Root Access: Hardening Autonomous Agent Governance from ag_ops v2.1 to v2.3

Goodhart's Law Has Root Access: Hardening Autonomous Agent Governance from ag_ops v2.1 to v2.3

Comments
16 min read
Pattern Guardrails Under Mutation: A Three-Metric Evaluation of Two Agent Safety Layers

Pattern Guardrails Under Mutation: A Three-Metric Evaluation of Two Agent Safety Layers

Comments
6 min read
Stop Giving Your Agent the Keys to Its Own Approval: A Developer's Guide to the OTP Bypass

Stop Giving Your Agent the Keys to Its Own Approval: A Developer's Guide to the OTP Bypass

Comments
4 min read
I built a vibe-coded app with planted keys. Here's what leaks from the outside and how to fix it.

I built a vibe-coded app with planted keys. Here's what leaks from the outside and how to fix it.

Comments 1
6 min read
Confidential Computing's Real Tax: SEV-SNP vs TDX vs H100 Confidential Mode

Confidential Computing's Real Tax: SEV-SNP vs TDX vs H100 Confidential Mode

Comments
4 min read
MicroVM vs Container for Agent Sandboxes: The Cold-Start Bill Nobody Budgets

MicroVM vs Container for Agent Sandboxes: The Cold-Start Bill Nobody Budgets

Comments
4 min read
Unsubscribe links need a signature, not a session

Unsubscribe links need a signature, not a session

Comments
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.