The Rietta Blog

Cybersecurity, software, and the law between them.

Since 2005, this blog has covered cybersecurity, software development, and cloud migration, a resource for anyone staying informed about these areas.

09/04/2026

Government Rails Site Hit Hours After CVE Patch

Rietta patched a government client's Ruby on Rails site within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.

Read More: Government Rails Site Hit Hours After CVE Patch

08/18/2026

Generate OpenSSL Elliptic Curve Key Pair from the Command Line

How to generate an OpenSSL elliptic curve (P-256) key pair from the command line, and why NIST-backed ECC beats scaling RSA past 3072-bit.

Read More: Generate OpenSSL Elliptic Curve Key Pair from the Command Line

08/15/2026

22 Years on Firefox, and Today I'm Finally All In

Going all in with Mozilla Firefox as a cybersecurity professional in 2026 and keeping my workstation and iOS devices in sync.

Read More: 22 Years on Firefox, and Today I'm Finally All In

08/05/2026

Meet Titan, the Rietta AI Research Lab Server

Meet Titan: our dual-GPU AMD research and development server behind Metadata Minder's ADA Title II and WCAG 2.1 scanning and two-key LUKS2/TPM security design.

Read More: Meet Titan, the Rietta AI Research Lab Server

07/28/2026

Threat Modeling for ADA/WCAG Compliance

An evidence-based approach to ADA Title II and WCAG document audits, using threat modeling and risk scoring to treat accessibility as a governance concern.

Read More: Threat Modeling for ADA/WCAG Compliance

07/25/2026

The Five Pillars of Information Security (And Why We Audit Accessibility)

The five pillars of information assurance: confidentiality, integrity, availability, authentication, and non-repudiation, and why accessibility is part of it.

Read More: The Five Pillars of Information Security (And Why We Audit Accessibility)

07/24/2026

Metadata in WordPerfect: ADA and WCAG 2.1 Compliance

A 1994 WordPerfect screenshot shows metadata fields predate today's ADA Title II & WCAG 2.1 requirements; courts still forget to fill them for legal compliance.

Read More: Metadata in WordPerfect: ADA and WCAG 2.1 Compliance

07/07/2026

Real ADA Title II Findings for Government Documents

Beyond alt text: the three metadata ADA Title II deficiencies we see most in government files, and why they matter: blank titles, missing dates, no language.

Read More: Real ADA Title II Findings for Government Documents

07/03/2026

297 Days: The Real ADA Title II Deadline for Government Documents

The DOJ extended the ADA Title II deadlines. Larger government entities have 297 days to fix their documents, and much remediation we've reviewed falls short.

Read More: 297 Days: The Real ADA Title II Deadline for Government Documents

02/04/2026

Protect Production SQL Databases from AI/LLM Agentic SQL Query Risks

Prompt injection can talk an LLM agent past a "SELECT only" rule. A read-only replica and lexical SQL validation give deterministic guardrails it can't bypass.

Read More: Protect Production SQL Databases from AI/LLM Agentic SQL Query Risks