The Rietta Blog
Cybersecurity, software, and the law between them.
Since 2005, this blog has covered cybersecurity, software development, and cloud migration, a resource for anyone staying informed about these areas.
04/03/2018
Panera Bread Story Is An Example of Why Governor Deal Should Veto SB 315
by Frank Rietta
Panera exposed millions of customer records through sheer negligence. I call on Governor Deal to VETO SB 315 to protect the researchers who expose such issues.
Read More: Panera Bread Story Is An Example of Why Governor Deal Should Veto SB 315
03/27/2018
Georgia SB 315, set to criminalize most independent security threat research, heads to Georgia Governor Nathan Deal for signature or veto
by Frank Rietta
As big companies buy cyber insurance over fixing security, Georgia clears the way for them to sue or press charges against Good Samaritan researchers.
03/26/2018
Georgia SB 315 anti-hacking law dangerously misses the mark of protecting people, making us all less safe
by Frank Rietta
If Georgia SB 315 becomes law, security experts will stop reporting vulnerabilities in good faith, since doing so could lead to criminal prosecution.
10/12/2017
Lay off the marketing plugins. Equifax hit with fake Flash update.
by Frank Rietta
Equifax caught distributing malware. Be careful what you allow to be included in your website to avoid these sorts of hacks.
Read More: Lay off the marketing plugins. Equifax hit with fake Flash update.
10/11/2017
Automated Patching Will be New Reality
by Frank Rietta
How fast can you update your production web app after an update is released? The answer better be minutes. Automated testing and deployment is the only way.
10/07/2017
Southeast Ruby Conference Recap
by Alex Piechowski
Rietta's recap of the South East Ruby Conf in Nashville, covering talks on soft skills, PostgreSQL JSON, open source, chatbots, and shipping working code.
10/03/2017
Automate Security Scans with Continuous Integration
by Alex Piechowski
Learn how to automatically run bundle-audit and brakeman in your CI suite with an example for TravisCI.
Read More: Automate Security Scans with Continuous Integration
09/18/2017
Equifax Missed Defense in Depth, Allowing a Massive Data Breach
by Frank Rietta
More than bad patch management, the weakness was Equifax's failure to design with the assumption that the front-end web server would be compromised.
Read More: Equifax Missed Defense in Depth, Allowing a Massive Data Breach
05/18/2017
Troubling ISP Privacy Repeal: The Data Will be Breached
by Frank Rietta
With a green light from Congress & President Trump, your ISP may begin some really creepy business practices that endanger your family's privacy and security.
Read More: Troubling ISP Privacy Repeal: The Data Will be Breached