DEV Community

#defensivesecurity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Gitea Actions runner registration is a CI trust decision

Gitea Actions runner registration is a CI trust decision

Comments
3 min read
marimo notebooks need a token and an execution boundary

marimo notebooks need a token and an execution boundary

Comments
3 min read
Uptime Kuma status pages and metrics need separate access rules

Uptime Kuma status pages and metrics need separate access rules

Comments
2 min read
Hoppscotch workspaces need a publication and agent boundary

Hoppscotch workspaces need a publication and agent boundary

Comments
3 min read
ReadWritePaths is an exception list, not a replacement for ProtectSystem

ReadWritePaths is an exception list, not a replacement for ProtectSystem

Comments
3 min read
ProtectClock closes more than the RTC device

ProtectClock closes more than the RTC device

Comments
3 min read
PrivatePIDs and ProcSubset hide process state that incident response still needs

PrivatePIDs and ProcSubset hide process state that incident response still needs

Comments
3 min read
TemporaryFileSystem and BindPaths create two different views of the same host

TemporaryFileSystem and BindPaths create two different views of the same host

Comments
3 min read
A reachable blackbox_exporter accepts a target and a request path

A reachable blackbox_exporter accepts a target and a request path

Comments
3 min read
RestrictFileSystems controls filesystem types, not application paths

RestrictFileSystems controls filesystem types, not application paths

Comments
3 min read
AmbientCapabilities and NoNewPrivileges need a capability review, not just two switches

AmbientCapabilities and NoNewPrivileges need a capability review, not just two switches

Comments
3 min read
PolicyKit allow_active answers a session question, not an identity question

PolicyKit allow_active answers a session question, not an identity question

Comments
3 min read
An nginx alias is only as safe as the location that reaches it

An nginx alias is only as safe as the location that reaches it

Comments
3 min read
SQL SECURITY DEFINER turns a stored routine into an authorization boundary

SQL SECURITY DEFINER turns a stored routine into an authorization boundary

Comments
3 min read
What 9100 exposes when node_exporter is reachable

What 9100 exposes when node_exporter is reachable

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.