The Rietta Blog

Cybersecurity, software, and the law between them.

Since 2005, this blog has covered cybersecurity, software development, and cloud migration, a resource for anyone staying informed about these areas.

03/16/2016

It is not just one iPhone, the FBI wants a future where it is impractical to deploy strong encryption without key escrow

The FBI wants strong encryption without key escrow, which is insecure at scale, to be illegal or impractical. Data breach risks rise as devices get less secure.

Read More: It is not just one iPhone, the FBI wants a future where it is impractical to deploy strong encryption without key escrow

02/05/2016

What is the difference between bcrypt and SHA256?

TL;DR: SHA1, SHA256, and SHA512 are fast hashes and bad for passwords. BCRYPT is a slow hash and good for passwords. Always use slow hashes, never fast ones.

Read More: What is the difference between bcrypt and SHA256?

10/15/2015

Ruby Application Security Talk Featured in Ruby Weekly Issue # 268

My Rocky Mountain Ruby 2015 talk, "Defending Against Data Breaches, as a Practicing Ruby Developer," was featured in Ruby Weekly issue #268.

Read More: Ruby Application Security Talk Featured in Ruby Weekly Issue # 268

10/11/2015

What is an Abuser Story (Software)

An abuser story is a user story from a malicious adversary's point of view: what agile software should block or mitigate, proven by automated regression tests.

Read More: What is an Abuser Story (Software)

09/28/2015

What is Application Security?

Read More: What is Application Security?

06/17/2015

The first real investor meeting post investment

A client shared Gordon Daugherty's article on how, once investment comes in, the lead investor gets a board seat and things become formal.

Read More: The first real investor meeting post investment

05/04/2015

Uniqueness Validation Race Condition in Ruby on Rails applications

Race conditions slip into production easily. 'validates :field_name, uniqueness: true' won't prevent duplicates; enforce data integrity with unique indexes too.

Read More: Uniqueness Validation Race Condition in Ruby on Rails applications

04/08/2015

10th Anniversary Blog

From a Georgia Tech studentโ€™s first post to a blog with 9,000+ monthly visitors, Rietta celebrates 10 years of growth, research, and community in tech. ๐ŸŽ“๐Ÿ’ก๐ŸŒ

Read More: 10th Anniversary Blog

03/30/2015

Adding a Rake Task for SQL Views to a Rails Project

How to keep SQL views as .sql files in db/sql_views and add a custom 'rake db:views' task to a Rails project, treating database views like ActiveRecord models.

Read More: Adding a Rake Task for SQL Views to a Rails Project

03/23/2015

Recommended content for agile startups and entrepreneurs - March 2015 edition

Our recommended sources of information and education for startups, entrepreneurs, or anybody who works with them.

Read More: Recommended content for agile startups and entrepreneurs - March 2015 edition