#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post

#DevtoSecurity

1573 posts

Feed·
20 of 1573 posts
Why crawler logs and browser analytics disagree: a five-check debugging guide
🖼️
0Read More

Why crawler logs and browser analytics disagree: a five-check debugging guide

DEV Community: security·webdecoy·about 3 hours ago
#905hwAad
#devtosecurity#devto#dev#browser#request

Reconcile server requests, JavaScript analytics and AI crawler claims without treating every missing pageview as a bot.

15s
Exchange Server on the internet: reading exposure when the banner names the protocol, not the build
📰
0Read More

Exchange Server on the internet: reading exposure when the banner names the protocol, not the build

DEV Community: security·jeffrey·about 3 hours ago
#JrYcH0e0
#devtosecurity#devto#dev#exchange#server

Exchange Server on the internet: reading exposure when the banner names the protocol, not...

15s
thumbmux: a mobile web UI for tmux and AI agents that is password-protected from the first second
🖼️
0Read More

thumbmux: a mobile web UI for tmux and AI agents that is password-protected from the first second

DEV Community: security·Mike Meshok·about 3 hours ago
#p6zttJqX
#devtosecurity#devto#dev#tmux#terminal

thumbmux puts a phone-friendly interface in front of your own tmux: tabs, a real text box, swipe scrolling, uploads. The terminal sits on a private unix socket with no open port.

15s
Claude on a Nokia 3310: a J2ME client, HMAC instead of TLS, and 41 bundled games
🖼️
0Read More

Claude on a Nokia 3310: a J2ME client, HMAC instead of TLS, and 41 bundled games

DEV Community: security·Mike Meshok·about 3 hours ago
#XprW02Xo
#devtosecurity#devto#dev#server#phone

VibeNokia is a Java ME terminal for a 2017 Nokia 3310 plus a small FastAPI server that runs claude -p. Notes on CLDC limits, hand-written HMAC signing over plain HTTP, and what that does and does not protect.

15s
Log wipers get caught by the sound of the wipe
📰
0Read More

Log wipers get caught by the sound of the wipe

DEV Community: security·tktkkame·about 3 hours ago
#kcrlSqCp
#devtosecurity#devto#dev#auditd#logs

Three detection lines for log deletion: the event, the command, and the silence. Includes a tested gap-detection one-liner.

15s
Five NGINX CVEs are conditional. Measure the conditions, not just the version
📰
0Read More

Five NGINX CVEs are conditional. Measure the conditions, not just the version

DEV Community: security·StarkMan·about 3 hours ago
#RIwX8JX8
#devtosecurity#devto#dev#nginx#assets

Five NGINX CVEs are conditional. Here is how to measure the conditions, not just the...

15s
The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Parameter Attacks, and Token
📰
0Read More

The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none Exploit, kid Parameter Attacks, and Token

DEV Community: security·tinali7564-eng·about 3 hours ago
#Qayykvw0
#devtosecurity#devto#dev#token#fullscreen

The Definitive Guide to JWT Security in 2026: HS256 vs RS256 vs ES256, The alg: none...

15s
Building a Passive PHP2Shell Header Inspector with Next.js and Cloudflare
🖼️
0Read More

Building a Passive PHP2Shell Header Inspector with Next.js and Cloudflare

DEV Community: security·Yun·about 20 hours ago
#r4AmpMka
#devtosecurity#devto#dev#version#response

When maintaining a PHP website, a simple question can lead to several different...

15s
How I Recovered My Lost Crypto Wallet Recovery Phrase with Mighty Hacker Recovery — No Upfront Fee
🖼️
0Read More

How I Recovered My Lost Crypto Wallet Recovery Phrase with Mighty Hacker Recovery — No Upfront Fee

DEV Community: security·James Walton·about 20 hours ago
#bx5tabwO
#devtosecurity#devto#dev#recovery#wallet

***How I Recovered My Lost Wallet Phrase Key* A few weeks ago, I experienced a frightening situation...

15s
Beyond Prompt Injection: Designing Secure Command Authorization for Industrial AI Agents
🖼️
0Read More

Beyond Prompt Injection: Designing Secure Command Authorization for Industrial AI Agents

DEV Community: security·MarketingPro·about 20 hours ago
#b1Nl5fEX
#devtosecurity#devto#dev#command#approval

AI agents can interpret documents, call tools, and interact with systems that influence real-world...

15s