DEV Community

#identity

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Break-Glass Accounts: The Ones You Hope You Never Use, Done Properly

Break-Glass Accounts: The Ones You Hope You Never Use, Done Properly

Comments
5 min read
Read-Only Was Never Harmless: Identity Lessons from CVE-2026-114625

Read-Only Was Never Harmless: Identity Lessons from CVE-2026-114625

Comments
2 min read
1,089,053 LDAP Services: Directory Exposure as a Reconnaissance Surface

1,089,053 LDAP Services: Directory Exposure as a Reconnaissance Surface

Comments
3 min read
The Web Stack You Cannot Ignore in 2026

The Web Stack You Cannot Ignore in 2026

Comments
3 min read
Ways to Generate IDs in JavaScript

Ways to Generate IDs in JavaScript

1
Comments
2 min read
MFA Fatigue and Number Matching: Why the Prompt Is the Control

MFA Fatigue and Number Matching: Why the Prompt Is the Control

Comments
4 min read
Conditional Access rollout: lessons learned, and what breaks on day one

Conditional Access rollout: lessons learned, and what breaks on day one

Comments
10 min read
DPoP makes a token sender-constrained, which changes what a stolen token is worth

DPoP makes a token sender-constrained, which changes what a stolen token is worth

Comments
3 min read
HashiCorp Boundary: 1,637 title matches for an access plane that brokers sessions

HashiCorp Boundary: 1,637 title matches for an access plane that brokers sessions

Comments
2 min read
Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account

Changing a Mobile Number in Our HR Portal Was Enough to Take Over an Account

Comments
2 min read
She Changed Her Surname and Six of Our Systems Decided She Was Someone New

She Changed Her Surname and Six of Our Systems Decided She Was Someone New

Comments
2 min read
The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare

The Ransom Note Without the Ransomware: Exfiltration-First Extortion in Healthcare

Comments
4 min read
Seven People Who No Longer Worked for Us Could Still Post as the Company

Seven People Who No Longer Worked for Us Could Still Post as the Company

Comments
2 min read
FIDO2 Account Recovery: The Gap Passwordless Rollouts Leave Open

FIDO2 Account Recovery: The Gap Passwordless Rollouts Leave Open

Comments
3 min read
Ephemeral credentials for databases: moving past the shared application account

Ephemeral credentials for databases: moving past the shared application account

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.