DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
1,000 downloads. I'm 13. I made you a promise. 🔓

1,000 downloads. I'm 13. I made you a promise. 🔓

18
Comments 12
3 min read
The internet's root key rotates in five days. Your resolver may not be ready.

The internet's root key rotates in five days. Your resolver may not be ready.

5
Comments 2
6 min read
Claude Code can delete your files. The 3-layer setup I run: sandbox, hooks, git checkpoints

Claude Code can delete your files. The 3-layer setup I run: sandbox, hooks, git checkpoints

Comments
4 min read
Ship the parachute in v1: why upgradeability and disaster recovery are not v2 features

Ship the parachute in v1: why upgradeability and disaster recovery are not v2 features

Comments
17 min read
I Built 40+ Multi-Tenant SaaS Apps. Here Are 7 Bugs That Leak Data

I Built 40+ Multi-Tenant SaaS Apps. Here Are 7 Bugs That Leak Data

Comments 1
3 min read
Multiple security schemes in OpenAPI: AND vs OR, optional auth, and per-operation overrides

Multiple security schemes in OpenAPI: AND vs OR, optional auth, and per-operation overrides

Comments
5 min read
Economic Capability Security in Distributed Financial Systems: Delegation, Replay, Attenuation, and the Confused Deputy

Economic Capability Security in Distributed Financial Systems: Delegation, Replay, Attenuation, and the Confused Deputy

Comments
22 min read
GraphQL resolvers often check the top-level object and skip the nested ones

GraphQL resolvers often check the top-level object and skip the nested ones

Comments 1
1 min read
GSC: A Self-Learning SAST That Proves Vulnerabilities, Fixes Them, and Learns From Your Feedback

GSC: A Self-Learning SAST That Proves Vulnerabilities, Fixes Them, and Learns From Your Feedback

Comments
10 min read
Free DevOps Tools Suite Online: Why Zero-Trust Client-Side Privacy Matters

Free DevOps Tools Suite Online: Why Zero-Trust Client-Side Privacy Matters

Comments
2 min read
Why "wrong passcode" was lying to users of my encrypted vault app

Why "wrong passcode" was lying to users of my encrypted vault app

Comments
2 min read
Air-Gapped Systems Explained: Architecture, Security, Limitations & Real-World Use Cases

Air-Gapped Systems Explained: Architecture, Security, Limitations & Real-World Use Cases

Comments
9 min read
Cisco Dropped 18 CVEs Yesterday — Here's What Actually Needs Your Attention

Cisco Dropped 18 CVEs Yesterday — Here's What Actually Needs Your Attention

Comments
1 min read
Building Kultarr: Making AWS Security Investigations Less Painful

Building Kultarr: Making AWS Security Investigations Less Painful

Comments
1 min read
Splunk Patched an Unauthenticated RCE in Its Own SIEM — Here's What You Need to Know

Splunk Patched an Unauthenticated RCE in Its Own SIEM — Here's What You Need to Know

Comments
2 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.