📰 Reddit r/webdev

26 articles · Updated every 3 hours · View all reads

All Articles 168,663 Blog Posts 160,626 Tech Tutorials 44,779 Research Papers 32,789 News 21,506 ⚡ AI Lessons

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2w ago

Why won't browsers just force safer defaults in the age of AI?

I'm re-reading up on CSRF and CSP on MDN, and I realized that all of these solutions are always opt-in, and usually trying to patch a problem that other standar

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 3w ago

Tab as password?

SAS disallows spaces in your password. My password manager suggested an invalid (but secure) password. So now that I have to make my own password: Out of spit

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 4w ago

WordPress homepage takes 36–60 seconds to load after malware attack

My WordPress website was attacked about two weeks ago. The malware appeared to replicate itself quickly across the WordPress PHP files, redirect traffic, and se

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

What does a source code security review actually fail to tell you?

I see a lot of tools and services blur source review, SAST, code audit, pentest, and “security verified” into one category. My current understanding is that sou

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

HIPAA-compliant BaaS experiences

I’m building a smaller scale web-app and it needs to meet HIPAA compliance. For apps that don’t require HIPAA I usually just use AWS and build it myself (usuall

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

The LinkedIn scam that gets you hacked - Solving a take-home interview test can quickly turn into a nightmare. Notes on developer trust, JavaScript malware, and autonomous detection

<img src="https://external-preview.redd.it/UuJplfTfbo2AZR9t5GHhz61TLwd7VlohZ1FVP-3i34Y.png?width=640&crop=smart&auto=webp&s=d134882336410f442d8d125b

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

My Experience with Transnational Repression: How ICANN's UDRP Domain Arbitration is Being Weaponized by Chinese Tech Giants

<img src="https://preview.redd.it/tsso79zyzpch1.png?width=140&height=97&auto=webp&s=ba951dbfc4e0abd64b4e2d7f7fe8244ba6394ead" alt="My Experience wit

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

Hey hey i thought my project is getting viral but it turned out to be a bot attack instead !

So it is a story from few months ago when i was working on something and i suddenly got a mail that my project is having 2000+ users now , so i thought that it

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

Permission denied :: Reason ≔ none

Well that’s not very helpful. Anyone maybe know why this submitted by <a href="https:/

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

What's up with my organization's website?

When accessing the public page, every single user right now sees the full file directory. The

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

We caught ~400 fake ChatGPT bots in two months

Over the last two months, 394 unique source IPs hit the sites we monitor claim

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 1mo ago

Sudden SSL Error for github pages custom domain website

Hi, I am currently developing and hosting a website on github pages. I purchased a domain and set up the proper DNS records linking it back to github servers (4

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

A couple of domains on my server have started redirecting to spam sites

A couple of websites on my server have started redirecting to strange very spammy sites like https://www2.newsus.app/m.ok/ My domains are: https://gallery.bents

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

89 npm packages got compromised again. deleting the package doesn't remove the malware.

So if you missed it, 32 npm packages under u/redhat-cloud-services got compromised last week. about 117,000 weekly downloads. i know, another supply chain attac

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

A community canvas to draw together on, exploring a hidden terminal and Capture The Flag (CTF) game, and a text based adventure game

<img src="https://preview.redd.it/z18rk86g4c6h1.png?width=140&height=63&auto=webp&s=ab7d1d16ddd8341fcf0b2e720f974446d7232c0c" alt="A community canva

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

Can a fake Sentry issue trick your coding agent into running a malicious npm package?

Saw a writeup this week about a new attack aimed at coding agents (Claude Code, Cursor, etc) and it's annoying in how simple it is. Attackers spray fake error l

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

I built an open-source vs-code extension to scan vulnerable dependencies and avoid getting compromised via another supply-chain.

<img src="https://preview.redd.it/c8df2fjegs5h1.png?width=140&height=97&auto=webp&s=e88940bf2c1593323a3e263794cd8deef3148c3b" alt="I built an open-s

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

Someone is trolling me and regularly sends messages through the contact form on my website—how can I protect my website from this?

Starting this year, I’ve been receiving fake inquiries through the form on my website—about one or two a month. The name, company, and email address are correct

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

Protecting public JSON API responses from scraping when using Cloudflare CDN — is there any real solution?

Hi, I have a web app that serves cached JSON files via Cloudflare CDN. The data is generated by a proprietary algorithm and has significant competitive value. T

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 2mo ago

Could this be reverse engineered?

im familiar with Kerckhoffs principle and the importance of transparency of implementation when it comes to cryptography, but as a thought excersise, i want to

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 3mo ago

How can I make the local decryption so fast that the user don't even understand we're decrypting everything locally? as like in Proton mail?

Hi, I was working on extension that has an end-to-end encrypted sync, and when user first time install the extension on a browser where it needs to download all

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 3mo ago

Has there been an increase in internet security in the last month?

I know very little about internet security, but in the last month and a half, shortly after I applied for a high security government job, Ive been having bad ce

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 3mo ago

Anyone using Drupal? Set aside downtime for core security updates now!

🚨 URGENT: Highly Critical Drupal Core SQL Injection (CVE-2026-9082) Affecting PostgreSQL — Patch Immediately! The Drupal Security Team has released a "Highly C

Reddit r/webdev 🔐 Cybersecurity ⚡ AI Lesson 4mo ago

HTTPie is marked as phishing now

Not sure if this is just for me or not, but I opened httpie.io now and saw this. What happened? <!-- SC_ON