DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
I Built a Linter That Catches the Security Bugs AI Assistants Keep Writing

I Built a Linter That Catches the Security Bugs AI Assistants Keep Writing

7
Comments 1
5 min read
GitHub Copilot flagged my security app as dangerous. Here's my technical response to every concern.

GitHub Copilot flagged my security app as dangerous. Here's my technical response to every concern.

9
Comments 8
2 min read
O que aprendi sobre segurança implementando hardening em um projeto que não lida com dinheiro

O que aprendi sobre segurança implementando hardening em um projeto que não lida com dinheiro

25
Comments
3 min read
I built a CLI that catches shadow APIs in Express.js repos before they merge to production

I built a CLI that catches shadow APIs in Express.js repos before they merge to production

1
Comments
5 min read
Why Cursor Keeps Writing Prototype Pollution Into Your Merge Code

Why Cursor Keeps Writing Prototype Pollution Into Your Merge Code

Comments
2 min read
GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

GhostApproval: six AI coding agents shipped a permission dialog that was reading the wrong path

Comments
4 min read
Trust Is an Engineering Output

Trust Is an Engineering Output

Comments
8 min read
Anthropic wants to grade AI jailbreaks like CVEs. Here's the framework.

Anthropic wants to grade AI jailbreaks like CVEs. Here's the framework.

Comments
3 min read
Threat-Modeling MonkeyCode as a Self-Hosted AI Coding Platform

Threat-Modeling MonkeyCode as a Self-Hosted AI Coding Platform

Comments
4 min read
Running Untrusted Code Safely: A Field Guide for AI and CI Pipelines

Running Untrusted Code Safely: A Field Guide for AI and CI Pipelines

Comments
6 min read
Decoupling & Securing Web App Storage: Building a Zero-Trust S3 Perimeter with Terraform

Decoupling & Securing Web App Storage: Building a Zero-Trust S3 Perimeter with Terraform

Comments
2 min read
When Your AI Coding Tool Reads Your Code, Where Does It Actually Go

When Your AI Coding Tool Reads Your Code, Where Does It Actually Go

1
Comments
4 min read
A plaintext Firebase password authenticated anyone who visited the site — here's how I fixed it without disconnecting anyone

A plaintext Firebase password authenticated anyone who visited the site — here's how I fixed it without disconnecting anyone

Comments
6 min read
Rosemary: Transparent Network Tunneling Over QUIC (Kernel-Level)

Rosemary: Transparent Network Tunneling Over QUIC (Kernel-Level)

1
Comments
2 min read
From CORS to RCE: WordPress Bug Bounty Chains

From CORS to RCE: WordPress Bug Bounty Chains

Comments
12 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.