Cybersecurity Category
Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.
Subscribe to Cybersecurity posts via RSS
10/07/2020
The convergence of Ruby on Rails and #AppSec Podcast Appearance
by Frank Rietta
Frank Rietta guest on the Application Security Podcast with Chris Romeo
Read More: The convergence of Ruby on Rails and #AppSec Podcast Appearance
04/25/2020
When Georgia was on the Brink of Outlawing Critical Computer Security Research, the Governor's Office Met with Me, and Vetoed it!
by Frank Rietta
On April 25, 2018, nine security professionals met with Governor Deal's office about a problematic criminal hacking bill. He vetoed it a few weeks later.
04/21/2020
Dependency Security and Hacking Rails with Jason Swett (Podcast)
by Frank Rietta
Podcast interview about Ruby on Rails dependencies, security, state-sponsored hacking, and practical tips on how to protect your organization.
Read More: Dependency Security and Hacking Rails with Jason Swett (Podcast)
04/01/2020
Snowfroc 2020 - Application Security and Development
by Chris Davis
Application security is important to an entire company, but what practical steps can we take on a development team to keep applications secure?
Read More: Snowfroc 2020 - Application Security and Development
02/06/2020
Dependency Management and Security
by Chris Choi
Security conscious developers can avoid security pitfalls in their own code, but what about the code that the developer did not write but is using?
01/21/2020
A Newer Dev's Perspective on Learning OWASP
by Rob Stringer
Why I'm learning Application Security as a blooming developer, and why other new programmers should consider it too! An overview of AppSec for beginners.
01/13/2020
AppSec as a Requirement in the Development Process
by Frank Rietta
A prediction that web application security won't be a post-development plugin in the 2020-2030 decade, and what you can do about it.
Read More: AppSec as a Requirement in the Development Process
10/29/2019
Xfinity is Man-in-the-Middle (MITM) Attacking my Internet
by Alex Piechowski
Xfinity injected 581 lines of JavaScript into unencrypted traffic as a data-cap warning, creating MITM risks, accessibility failures, and slower loads.
Read More: Xfinity is Man-in-the-Middle (MITM) Attacking my Internet
10/28/2019
Patch Production Faster with Security-oriented Agile Development Practices
by Frank Rietta
Companies take too long to patch production leaving plenty of time for threats to attack! Here's how to fix it with security-oriented Agile practices.
Read More: Patch Production Faster with Security-oriented Agile Development Practices
09/06/2019
Ruby Gems Supply Chain Vulnerability
by Frank Rietta
Review of 2019 RubyGems supply chain attacks like bootstrap-sass and rest-client, plus typo-squatted gems, with 5 practical steps to protect your Rails project.