DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Math.random() Is Not Random Enough. I Found It Building API Keys in a 44K-Star Repo.

Math.random() Is Not Random Enough. I Found It Building API Keys in a 44K-Star Repo.

2
Comments
5 min read
Coding agents should not hold write credentials.

Coding agents should not hold write credentials.

Comments
4 min read
Google Has 1,000 Platform Engineers Making Security Invisible. You Have Zero. Here's How Agents Close the Gap.

Google Has 1,000 Platform Engineers Making Security Invisible. You Have Zero. Here's How Agents Close the Gap.

Comments
8 min read
How to Run Claude Code Sandboxed: Containers, Network Walls, and Secret Isolation

How to Run Claude Code Sandboxed: Containers, Network Walls, and Secret Isolation

Comments
6 min read
What We Actually Did About npm Supply Chain Attacks

What We Actually Did About npm Supply Chain Attacks

Comments
7 min read
AWS SigV4 and SigV4A Deep Dive

AWS SigV4 and SigV4A Deep Dive

Comments
14 min read
I tested mcp-doctor pricing with 12 LLM-simulated personas. 4 said they would pay.

I tested mcp-doctor pricing with 12 LLM-simulated personas. 4 said they would pay.

Comments
4 min read
CSRF, and the cookie flag

CSRF, and the cookie flag

Comments
4 min read
"The AI did it" won't save you when EU regulators come knocking

"The AI did it" won't save you when EU regulators come knocking

Comments
3 min read
Cookie Tampering: How Attackers Modify Cookies to Break Into Web Apps (And How You Can Prevent It)

Cookie Tampering: How Attackers Modify Cookies to Break Into Web Apps (And How You Can Prevent It)

Comments
4 min read
Fireblocks Agentic Payments: The Paid Request That Still Stays on Hold

Fireblocks Agentic Payments: The Paid Request That Still Stays on Hold

Comments
7 min read
I scanned 200 popular MCP server packages. Here is what I found.

I scanned 200 popular MCP server packages. Here is what I found.

Comments
4 min read
My test suite was green. My software was lying to me.

My test suite was green. My software was lying to me.

1
Comments 1
6 min read
Linux Kernel Log 2.6.30: New File Systems and Modular Architecture

Linux Kernel Log 2.6.30: New File Systems and Modular Architecture

Comments
5 min read
The Six Things That Broke During My kubeadm Setup on Hetzner — and How I Fixed Them

The Six Things That Broke During My kubeadm Setup on Hetzner — and How I Fixed Them

Comments
7 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.