The Rietta Blog

Cybersecurity, software, and the law between them.

Since 2005, this blog has covered cybersecurity, software development, and cloud migration, a resource for anyone staying informed about these areas.

11/06/2026

Does Your Agency Need ADA Remediation? Triage Your Documents First

Not every government document needs remediation under ADA Title II and the WCAG rules. Fix the source first, then exempt, replace, or remediate.

Read More: Does Your Agency Need ADA Remediation? Triage Your Documents First

11/03/2026

Introducing DocLoupe: A Desktop ADA and WCAG Document Accessibility Analyzer

DocLoupe is a desktop ADA and WCAG document accessibility analyzer with no telemetry and fast local scanning, launching ahead of eCourts in Las Vegas.

Read More: Introducing DocLoupe: A Desktop ADA and WCAG Document Accessibility Analyzer

10/30/2026

Reported SSH Backdoor in Claude Code Extension Served Through Cursor

Phorion reports a tampered Claude Code extension, version 2.1.313, served via the Cursor marketplace planted an SSH key. Here is how to check if you were hit.

Read More: Reported SSH Backdoor in Claude Code Extension Served Through Cursor

10/20/2026

Built an App with AI? Get a Security Review Before Launch

Non-developers now build working custom apps with AI assistants. A few hours of expert whiteboard review before launch can save a lot of grief later.

Read More: Built an App with AI? Get a Security Review Before Launch

10/06/2026

What Is Title II of the ADA?

Title II of the ADA applies to state and local governments. A 2024 rule sets technical standards for their websites, apps, and documents.

Read More: What Is Title II of the ADA?

09/28/2026

When to Involve Legal Counsel in an ADA/WCAG Audit

ADA/WCAG audit findings on a government's documents can become discoverable. Why state and local agencies should consider looping in legal counsel first.

Read More: When to Involve Legal Counsel in an ADA/WCAG Audit

09/20/2026

Document Provenance: Finding the Common Ancestor of Inaccessible Documents

How we trace inaccessible government documents back to a common ancestor, that is the shared template, tool, or workflow behind their ADA/WCAG defects.

Read More: Document Provenance: Finding the Common Ancestor of Inaccessible Documents

09/16/2026

Non-Repudiation in Cybersecurity

Non-repudiation is a foundational security property among the five pillars of Information Assurance. It is at natural odds with Privacy and must be balanced.

Read More: Non-Repudiation in Cybersecurity

09/15/2026

On Flock Cameras and "What Do You Have to Hide"

A cybersecurity take on Flock cameras, ATF's 4473 database, and why weaker retention policies are not real safeguards against bulk surveillance.

Read More: On Flock Cameras and "What Do You Have to Hide"

09/14/2026

RubyGems Open Source Supply Chain Security and OpenAI

OpenAI agents attacked RubyGems in May 2026. Why automated attackers have collapsed the window to patch a critical CVE from weeks to hours.

Read More: RubyGems Open Source Supply Chain Security and OpenAI