Cybersecurity Category
Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.
Subscribe to Cybersecurity posts via RSS
05/14/2024
UUID as a secure API token for API RESTful endpoints? (Video)
by Frank Rietta
Video excerpt about the role of UUIDs as a security identifier for REST API and how to use them more securely if you must.
Read More: UUID as a secure API token for API RESTful endpoints? (Video)
11/28/2023
An Honest Conversation About Cyber Security (Video)
by Frank Rietta
I recently sat down with Jeremy Duvall of 7Factor Software to discuss Cyber Security and application developers. Enjoy this video!
Read More: An Honest Conversation About Cyber Security (Video)
09/27/2023
Prioritizing cybersecurity (Pluralsight)
by Frank Rietta
The structure and siloing of a large enterprise organization can thwart security efforts. Here is a tip on how to overcome.
10/01/2021
You Can be the Victim of a Cybersecurity Attack: Do Your Part. #BeCyberSmart.
by Frank Rietta
Be cyber smart: you can be the victim of a cyber security incident, so keep your Internet connected custom software configured and patched. #BeCyberSmart.
Read More: You Can be the Victim of a Cybersecurity Attack: Do Your Part. #BeCyberSmart.
07/07/2021
Paying Ransomware is Harmful: Invest in proactive defense instead.
by Frank Rietta
Paying ransom only increases the incentive for more ransoms. Protect yourself with Threat Actor / Capability modeling and practically free countermeasures.
Read More: Paying Ransomware is Harmful: Invest in proactive defense instead.
06/30/2021
Top 5 Cyber Security Self-Defense Tips for Businesses with Custom Applications
by Frank Rietta
There is no Internet coast guard coming to your aid. Here are the top five tips to prepare your company for its own self-defense against cyber attack.
Read More: Top 5 Cyber Security Self-Defense Tips for Businesses with Custom Applications
05/25/2021
Cross-site Scripting Injection Attacks Using SVG Images
by Christopher Davis
Cross-Site Scripting attacks come from many vectors. This article explains an unusual one: JavaScript embedded within a Scalable Vector Graphics (SVG) image.
Read More: Cross-site Scripting Injection Attacks Using SVG Images
05/11/2021
Lava lamps providing randomness for security!
by Frank Rietta
Lava Lamps as a security tool is an old idea, once covered by a patent. This is why I proudly display a Lava Lamp in my office within my web cam shot.
04/27/2021
Testing: Your Future Self Will Thank You
by Wren Steitle
Testing, while not always glorious, is a vital part of a good code base. Tests and code should go hand in hand.
02/04/2021
Practical APPSEC starts with people first, processes second, and technology last
by Frank Rietta
Technology purchases can't solve application security; it takes people, processes, and technology. How to invest in developer education and process first.
Read More: Practical APPSEC starts with people first, processes second, and technology last