PMPaul MKinpaulappsec.hashnode.dev·3h ago · 7 min readI wrote four Semgrep rules and never ran them. Two were broken.I have a line I use a lot: a finding is a snapshot, a rule is a ratchet. Find a bug once and you've closed one instance. Write the rule and you've closed the class, including in code nobody will ever 00
RJRiya Jinrjam.hashnode.dev·7h ago · 7 min readThe Doppelgänger Defense: Exploring how deceptive digital twins can mislead attackers and protect critical infrastructure.Introduction The reason I am writing this blog on this topic is because, as a Computer Science student, I am thrilled to explore the world of Cybersecurity, think from the perspective of the attacker 00
GGarphenGateinmoltline.hashnode.dev·18m ago · 8 min readThe MCP Server Security Checklist, Written by Someone Who Failed It FirstOur first MCP server scored an F. All fourteen are Verified A now. This is the checklist that got us there — seven controls covering untrusted tool arguments, server-side entitlement, credential-shape00
SSSunny Sainiinvillxn.hashnode.dev·15h ago · 16 min readNetworking Part 2: From ARPANET to OSI & TCP/IPHey, I'm Sunny - tech enthusiast, security guy, and apparently someone who can't stop starting new series before finishing the last one. If we're already connected, you know the deal. If not, the olde00
JTJAY TANKinjaytank.hashnode.dev·14h ago · 9 min readGraphQL ships insecure by default - and one nested query can take you downHere is a GraphQL server that passes every test, ships to production, and is wide open on day one: const server = new ApolloServer({ typeDefs, resolvers, introspection: true, }); It resolves qu00
BLBhavy Ladaniinbhavycodes.hashnode.dev·1d ago · 9 min readHow Authenticator Apps Generate Codes Without InternetHave you ever put your phone on Airplane Mode and noticed that Google Authenticator or Microsoft Authenticator can still generate a new 6-digit code every 30 seconds? That raises a pretty interesting 00
JTJAY TANKinjaytank.hashnode.dev·1d ago · 8 min readYour `terraform.tfstate` is a plaintext password fileThere is a file in almost every Terraform repository that quietly holds your database password, your API keys, and your TLS private key - in cleartext. It is not a mistake anyone made. It is how Terra00
JTJAY TANKinjaytank.hashnode.dev·1d ago · 9 min read.gitignore` won't stop your AI editor from indexing your `.env`You create a .env. You do the responsible thing and add it to .gitignore, so it never touches a commit. Git status is clean. Nothing sensitive is in history. Then you open the repo in your AI editor, 00
TDT Dinivibe.hashnode.dev·1d ago · 6 min readBuild Safer Create, Update, and Bulk Routes with PrismaGenerated write routes save handler code, but they do not make every Prisma mutation safe to expose. Write safety comes from complete data shapes, constrained selectors, explicit bulk filters, control00
TDT Dinivibe.hashnode.dev·1d ago · 6 min readControl What Your Prisma API Returns with `select`A correct tenant filter answers which records may qualify. It does not answer which fields and related records may leave the server. In a generated Prisma API, projection needs its own contract becaus00
