Cybersecurity Category
Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.
04/01/2020
Snowfroc 2020 - Application Security and Development
by Chris Davis
Application security is important to an entire company, but what practical steps can we take on a development team to keep applications secure?
02/06/2020
Dependency Management and Security
by Chris Choi
Security conscious developers can avoid security pitfalls in their own code, but what about the code that the developer did not write but is using?
01/21/2020
A Newer Dev's Perspective on Learning OWASP
by Rob Stringer
Why I'm learning Application Security as a blooming developer, and why other new programmers should consider it too! An overview of AppSec for beginners.
01/13/2020
AppSec as a Requirement in the Development Process
by Frank Rietta
A prediction that web application security will not be a post-development plugin you can add to your application in the decade of 2020-2030 and what you can do about it.
10/29/2019
Xfinity is Man-in-the-Middle (MITM) Attacking my Internet
by Alex Piechowski
Xfinity injected 581 lines of JavaScript into unencrypted traffic as a data-cap warning, creating MITM risks, accessibility failures, and slower loads.
10/28/2019
Patch Production Faster with Security-oriented Agile Development Practices
by Frank Rietta
Companies take too long to patch production leaving plenty of time for threats to attack! Here's how to fix it with security-oriented Agile practices.
09/06/2019
Ruby Gems Supply Chain Vulnerability
by Frank Rietta
Review of 2019 RubyGems supply chain attacks like bootstrap-sass and rest-client, plus typo-squatted gems, with 5 practical steps to protect your Rails project.
08/22/2019
The Case for 2FA, Post Rest-client Gem CVE
by Christopher Choi
On 08/19/2019, a CVE was discovered on a popular Ruby gem called Rest-client. Although caught quickly, this could raise the case of 2FA being a requirement for Package Manager accounts like Rubygems and NPM.
05/30/2019
Account Protection Policies to Cover Business Assets
by Frank Rietta
Utilizing two factor authentication, strong passphrases, password managers, and NIST standards; private company accounts can remain secure. Cover your assets!
05/09/2019
Restrict Who Can Push to Matching Branches on Github
by Frank Rietta
On GitHub, you can enable branch restrictions allowing only certain users, teams, or apps to be able to push to a protected branch.