DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
The Most Embarrassing Private Key in Web PKI History

A key so small it could be counted by hand

The Most Embarrassing Private Key in Web PKI History

19
Picked as gem Comments 7
10 min read
Your "use server" Functions Are Public HTTP Endpoints (And Middleware Won't Save You)

Your "use server" Functions Are Public HTTP Endpoints (And Middleware Won't Save You)

11
Comments 9
6 min read
155 responses leaked between AI customers: the GLM-5.3 KV cache bug — and the canary test for YOUR provider

155 responses leaked between AI customers: the GLM-5.3 KV cache bug — and the canary test for YOUR provider

7
Comments 4
5 min read
Qwen upload probe, Roblox crawler claim, Python JIT removal and Debian LLM reviews: what the sources say

Qwen upload probe, Roblox crawler claim, Python JIT removal and Debian LLM reviews: what the sources say

1
Comments
8 min read
A Skill Is More Than a Markdown File: Vetting scaffold-docs Against OWASP’s Agentic Skills Top 10

A Skill Is More Than a Markdown File: Vetting scaffold-docs Against OWASP’s Agentic Skills Top 10

Comments
6 min read
Node.js Bundled a Decoder That Wrote Past Its Eight-Byte Buffer

Node.js Bundled a Decoder That Wrote Past Its Eight-Byte Buffer

Comments
7 min read
How an invisible HTML comment in an email tricked my local LLM agent (and how I fixed it with a WASM sandbox)

How an invisible HTML comment in an email tricked my local LLM agent (and how I fixed it with a WASM sandbox)

Comments 2
5 min read
The Root Password Changed at 10:17 and Nobody Logged In — The VM Console Path Your Firewall Never Sees

The Root Password Changed at 10:17 and Nobody Logged In — The VM Console Path Your Firewall Never Sees

Comments
11 min read
Eight CA keys were guessable. The padlock never noticed.

Eight CA keys were guessable. The padlock never noticed.

Comments
7 min read
You Deleted the .env File From Git. Your Secrets Are Still Public.

You Deleted the .env File From Git. Your Secrets Are Still Public.

Comments
4 min read
Architectural Deep-Dive: I-HITL: Inalienable Human-in-the-Loop

Architectural Deep-Dive: I-HITL: Inalienable Human-in-the-Loop

Comments
3 min read
Sign-In with Ethereum in Next.js 16: SIWE with viem, iron-session and a Replay-Proof Nonce (Tested)

Sign-In with Ethereum in Next.js 16: SIWE with viem, iron-session and a Replay-Proof Nonce (Tested)

Comments
8 min read
Weir: API key leak detection for the agents you build and the coding agent you use

Weir: API key leak detection for the agents you build and the coding agent you use

1
Comments
6 min read
Microsoft retires SMS and voice MFA on 1 February 2027: find the users it will block

Microsoft retires SMS and voice MFA on 1 February 2027: find the users it will block

Comments
4 min read
What Claude Code's telemetry sends, and how to see it for yourself

What Claude Code's telemetry sends, and how to see it for yourself

1
Comments
8 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.