DEV Community

#securityengineering

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Safe archive extraction must validate the final path
johnettagaweraks profile

Safe archive extraction must validate the final path

#cybersecurity #securityengineering
Comments
2 min read
A PKCS#11 key can be protected and still be over-authorized
ioneyrezende profile

A PKCS#11 key can be protected and still be over-authorized

#cybersecurity #securityengineering
Comments
2 min read
S3 Object Ownership changes control, not the need for an access policy
stark_zhuang_df5076f35c68 profile

S3 Object Ownership changes control, not the need for an access policy

#cybersecurity #securityengineering
Comments
2 min read
An Azure SAS needs a signing scope and a revocation path
jeffreyciend profile

An Azure SAS needs a signing scope and a revocation path

#cybersecurity #securityengineering
Comments
3 min read
DANE TLSA policy only works when the client enforces DNSSEC
kozhevniko profile

DANE TLSA policy only works when the client enforces DNSSEC

#cybersecurity #securityengineering
Comments
2 min read
A cached sudo timestamp is a policy decision with a lifetime
andreagomez profile

A cached sudo timestamp is a policy decision with a lifetime

#cybersecurity #securityengineering
Comments
2 min read
Kubernetes priority classes can preempt security controls
bianliang profile

Kubernetes priority classes can preempt security controls

#cybersecurity #securityengineering
Comments
2 min read
binfmt_misc turns an interpreter registration into an execution path
onaeiuspkz profile

binfmt_misc turns an interpreter registration into an execution path

#cybersecurity #securityengineering
Comments
2 min read
SQLite trusted_schema controls indirect schema execution
facilishz profile

SQLite trusted_schema controls indirect schema execution

#cybersecurity #securityengineering
Comments
2 min read
Redis Lua keys need to be declared before the script runs
sorrelthorncroft profile

Redis Lua keys need to be declared before the script runs

#cybersecurity #securityengineering
Comments
2 min read
It Only Needed to Open PRs. LiteLLM Made It the GitHub Admin.
neerazz profile

It Only Needed to Open PRs. LiteLLM Made It the GitHub Admin.

#aisecurity #agenticai #mcp #securityengineering
Comments
5 min read
Windows AppContainer: a sandbox that depends on how the application is written
kozhevniko profile

Windows AppContainer: a sandbox that depends on how the application is written

#securityengineering
Comments
3 min read
The Skill Listed What It Sends. It Left Out Your Hostname.
neerazz profile

The Skill Listed What It Sends. It Left Out Your Hostname.

#aisecurity #agenticai #mcp #securityengineering
Comments 4
4 min read
Cloud Security: Principles and Concepts
fjavierm profile

Cloud Security: Principles and Concepts

#cybersecurity #riskmanagement #securityengineering #securitystrategy
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.