DEV Community

Security

Hopefully not just an afterthought!

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
The Witness Was the Suspect: Why AI Audit Logs Can't Be Trusted

Distinguishing tamper-proof from truth-proof

The Witness Was the Suspect: Why AI Audit Logs Can't Be Trusted

24
Comments 15
9 min read
I built a harvest tripwire, then almost let an LLM decide who looks legit

I built a harvest tripwire, then almost let an LLM decide who looks legit

Comments
4 min read
Your agent says verified. Nothing binds it to the artifact

Your agent says verified. Nothing binds it to the artifact

4
Comments 11
6 min read
ForgeZero and Gloria: Build Tooling for People Who Still Want to Know What Their CPU Is Doing

ForgeZero and Gloria: Build Tooling for People Who Still Want to Know What Their CPU Is Doing

1
Comments 1
9 min read
The bug a security tool must never have

The bug a security tool must never have

Comments
5 min read
Designing an Encrypted Trash for a Privacy-First Android App

Designing an Encrypted Trash for a Privacy-First Android App

1
Comments 1
4 min read
Un despliegue que depende del análisis de seguridad con GitHub Actions

Un despliegue que depende del análisis de seguridad con GitHub Actions

Comments
4 min read
Guardrail para banco (BCB)

Guardrail para banco (BCB)

Comments
4 min read
The 0-Click AI Attack: How Indirect Prompt Injection Hijacks AI Agents

The 0-Click AI Attack: How Indirect Prompt Injection Hijacks AI Agents

Comments
5 min read
A Bike Photo Changed How I Think About Privacy in Android Apps

A Bike Photo Changed How I Think About Privacy in Android Apps

Comments
4 min read
Role-Based and Permission-Based Access Control in Spring Security

Role-Based and Permission-Based Access Control in Spring Security

Comments
5 min read
What your photos say about you: the metadata fields to check before you share

What your photos say about you: the metadata fields to check before you share

Comments
2 min read
How to check that a PDF tool really doesn't upload your files

How to check that a PDF tool really doesn't upload your files

Comments
2 min read
Bulk domain age, expiry and DNS audit in Python: RDAP with WHOIS fallback

Bulk domain age, expiry and DNS audit in Python: RDAP with WHOIS fallback

Comments
2 min read
Audit-Ready CI/CD: What Regulated Industries Teach Us About Shipping Software

Audit-Ready CI/CD: What Regulated Industries Teach Us About Shipping Software

Comments
3 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.