DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
From Arduino To Automotive: How I Escaped The IDE And Owned The Bus
numbpill3d profile

From Arduino To Automotive: How I Escaped The IDE And Owned The Bus

#esp32 #arduino #canbus #security
1
Comments
7 min read
The Permission Boundary My MCP Server Doesn't Actually Have
enjoy_kumawat profile

The Permission Boundary My MCP Server Doesn't Actually Have

#mcp #agents #security #python
1
Comments 1
4 min read
I shipped an MCP server that reported success without signing anything
edycutjong profile

I shipped an MCP server that reported success without signing anything

#mcp #ai #security #typescript
1
Comments
6 min read
Stealing Reasoning Traces from LLM APIs: How It Works and What to Audit
jamilxt profile

Stealing Reasoning Traces from LLM APIs: How It Works and What to Audit

#ai #security #llm #agents
Comments 2
8 min read
Anonymous pastebins are a spam magnet. I gated mine with proof-of-work instead of logins.
zekebuilds profile
Zeke

Anonymous pastebins are a spam magnet. I gated mine with proof-of-work instead of logins.

#webdev #bitcoin #security #tutorial
Comments
4 min read
A Deny-by-Default Manifest for AI-Generated Services on a Free Server
github_7727 profile

A Deny-by-Default Manifest for AI-Generated Services on a Free Server

#security #devops #ai #tutorial
Comments
5 min read
Proof-of-Fix in GSC: An Architecture for Provable Vulnerability Remediation Verification
alexey_polyakov_cfe2095e3 profile

Proof-of-Fix in GSC: An Architecture for Provable Vulnerability Remediation Verification

#security #cybersecurity #python #devsecops
Comments
7 min read
JWT Authentication in Express That You Can Actually Revoke
mmushood profile

JWT Authentication in Express That You Can Actually Revoke

#backend #javascript #node #security
1
Comments 2
21 min read
Writing an IAM Policy That's Actually Least Privilege
mariogongora profile

Writing an IAM Policy That's Actually Least Privilege

#aws #cloudsecurity #iam #security
Comments
8 min read
Don't Hand Your Inbox to an Agent
net_tab_ddf9dfbe0c308827e profile

Don't Hand Your Inbox to an Agent

#ai #security #claudecode #oauth
1
Comments 2
2 min read
trelix v2.11.0 to v3.1.1: Six Feature Areas, Every One of Them Off By Default
sai_ram_0000 profile

trelix v2.11.0 to v3.1.1: Six Feature Areas, Every One of Them Off By Default

#python #security #systemdesign #opensource
Comments
12 min read
How to Safely Fetch Metadata from User-Submitted URLs (Without Getting Hit by SSRF or DNS Rebinding)
josejux profile

How to Safely Fetch Metadata from User-Submitted URLs (Without Getting Hit by SSRF or DNS Rebinding)

#security #python #api #webdev
Comments
4 min read
L4 vs L7 Stress Testing: What Actually Breaks First
zerodawnipstress profile

L4 vs L7 Stress Testing: What Actually Breaks First

#networking #security #testing #devops
Comments
3 min read
If you render user HTML, you have an SSRF problem. Here is the code that fixes it.
stackedboost profile

If you render user HTML, you have an SSRF problem. Here is the code that fixes it.

#security #node #webdev #javascript
Comments
5 min read
My AI Agent Tried to Delete Every Customer Record. Here's What Stopped It.
frederikvonderheyden profile

My AI Agent Tried to Delete Every Customer Record. Here's What Stopped It.

#ai #agents #devops #security
Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.