Dev.to Security

24/365 稼働で得られるものはセキュリティ脅威に見合うか ?

「Web サービスは、24 時間 365 日止まらず動いているのが当たり前」——私たちは、いつからそう考えるようになったのでしょうか。 高い可用性は、もちろん価値があります。オンライン決済、医療…

Making "one-time" links actually one-time: fragments, preview bots and an atomic DELETE

Every team has a "temporary" password sitting in a chat history somewhere. Someone pasted a database…

Can You Install a Doorbell Camera in a Rental?

Two different things are being mixed together here, and separating them changes what you should do. …

Unless your package is huge, your advisory waits

On 11 July, Weblate published six security advisories on its GitHub repo, each naming the fixed vers…

Sandboxing agents at the OS level: notes on Anthropic's sandbox-runtime

Anthropic's sandbox-runtime denies filesystem writes and network access by default; everything else …

Exchange's Last ESU Patch Is Out, and a Windows Update Is Knocking Servers Over

On 13 October 2026 Microsoft shipped what it calls the last security update that Exchange Server 201…

Smart Locks vs Regular Locks: Is the Upgrade Worth It?

It is better at one specific thing, and roughly equivalent or sometimes worse at the thing most peop…

Cross-Chain Bridge Risk Assessment: Spark Savings

Cross-Chain Bridge Risk Assessment: Spark Savings Target Protocol: Spark Savings (TVL: $1611.0M) …

Linux Web Hosting Server Hardening: Malware Scanning, Fail2Ban, ModSecurity WAF and IP Blocking

A web hosting server is hard to secure for a simple reason: you don't control most of the code runni…

What Is the Best CCTV Camera for Office and Home?

There is no best, and anyone who answers with a model number is selling something. The useful questi…

Pipelock v3.7: Parallel Receipts and Filesystem Grants

A signed receipt chain can be intact without proving the writer finished. Pipelock v3.7 makes that d…

Are Home Security Cameras Worth It?

It depends which of three jobs you expect it to do, because cameras are excellent at one, mediocre a…