#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post

#DevtoSecurity

1929 posts

Feed·
13 of 1929 posts
Why cumulative input cost grows quadratically when an agent resends its history, and a pre-commit gate that stops known leak patterns
📰
0Read More

Why cumulative input cost grows quadratically when an agent resends its history, and a pre-commit gate that stops known leak patterns

DEV Community: security·ZEUS LAB·about 6 hours ago
#1f7qkxSB
#devtosecurity#devto#dev#self#name

The arithmetic of resending history on every step, a pre-call estimate that refuses the next call, and a standard-library pre-commit gate for home paths, keys, wallet phrases, e-mails and EXIF.

15s
Why a "free Telegram Stars generator" can't exist: a look at the Bot API
📰
0Read More

Why a "free Telegram Stars generator" can't exist: a look at the Bot API

DEV Community: security·Gift Club·about 6 hours ago
#dfTKzG52
#devtosecurity#devto#dev#stars#telegram

Search Telegram for "free Stars" and you'll find bots promising 5,000 Stars for joining a channel,...

15s
Arcus Perps Exploit: Subaccount Bug Drains $2.23M
📰
0Read More

Arcus Perps Exploit: Subaccount Bug Drains $2.23M

DEV Community: security·PandaSecurity·about 6 hours ago
#w5X36V7y
#devtosecurity#devto#dev#arcus#balance

How a subaccount transfer accounting bug let one new account inflate its balance and withdraw 2.23M USDG from Arcus Perps on Robinhood Chain.

15s
How We Engineered a Stateless SAML 2.0 to HS256 JWT Middleware Proxy (Zero-PII Architecture)
📰
0Read More

How We Engineered a Stateless SAML 2.0 to HS256 JWT Middleware Proxy (Zero-PII Architecture)

DEV Community: security·KyoRox·about 6 hours ago
#HptlF08g
#devtosecurity#devto#dev#kyorox#saml

Eliminating B2B SaaS XML parsing debt and per-user MAU identity taxes with volatile RAM execution and flat-rate SSO middleware.

15s
Your agent can read every email. Make sure it can send none of them.
📰
0Read More

Your agent can read every email. Make sure it can send none of them.

DEV Community: security·Dekita·about 18 hours ago
#7yMLfHtQ
#devtosecurity#devto#dev#model#send

A dev.to project wired an open-weight model to a live inbox and red-teamed it with six poisoned emails. The control that held was not a better prompt.…

15s
Linux Privilege Escalation: Why One SUID Binary Gives Attackers Root (And How to Fix It)
📰
0Read More

Linux Privilege Escalation: Why One SUID Binary Gives Attackers Root (And How to Fix It)

DEV Community: security·Linux Pedia·about 18 hours ago
#FDjP1VOH
#devtosecurity#devto#dev#suid#root

⚠️ Disclaimer: For Educational Purposes Only All commands and demonstrations in this article are...

15s
My AI shipped a 1,199-line change nobody understood. I built a CLI that scores how fragile it is.
📰
0Read More

My AI shipped a 1,199-line change nobody understood. I built a CLI that scores how fragile it is.

DEV Community: security·TECHDEV·about 18 hours ago
#flyU1m3o
#devtosecurity#devto#dev#lines#fragility

My AI shipped a 1,199-line change nobody understood. I built a CLI that scores how fragile...

15s
Token's digital assistant violated security rules by design
🖼️
0Read More

Token's digital assistant violated security rules by design

DEV Community: security·Hacks.gr·about 18 hours ago
#teqZLkjI
#devtosecurity#devto#dev#assistant#user

Token built Rehearsal, an AI agent that operates inside user browser sessions with full user permissions. Because servers cannot distinguish human clicks f

15s