Cybersecurity Category
Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.
Subscribe to Cybersecurity posts via RSS
04/25/2020
When Georgia was on the Brink of Outlawing Critical Computer Security Research, the Governor's Office Met with Me, and Vetoed it!
by Frank Rietta
On April 25, 2018, nine information security professionals met with the Georgia Governor's office to discuss why the proposed criminal hacking law passed by both houses of the General Assembly was extremely problematic to Georgia's booming Information Security industry and risked putting the public at greater risk. Governor Deal vetoed the law a few weeks later.
04/21/2020
Dependency Security and Hacking Rails with Jason Swett (Podcast)
by Frank Rietta
Podcast interview about Ruby on Rails dependencies, security, state-sponsored hacking, and practical tips on how to protect your organization.
04/01/2020
Snowfroc 2020 - Application Security and Development
by Chris Davis
Application security is important to an entire company, but what practical steps can we take on a development team to keep applications secure?
02/06/2020
Dependency Management and Security
by Chris Choi
Security conscious developers can avoid security pitfalls in their own code, but what about the code that the developer did not write but is using?
01/21/2020
A Newer Dev's Perspective on Learning OWASP
by Rob Stringer
Why I'm learning Application Security as a blooming developer, and why other new programmers should consider it too! An overview of AppSec for beginners.
01/13/2020
AppSec as a Requirement in the Development Process
by Frank Rietta
A prediction that web application security will not be a post-development plugin you can add to your application in the decade of 2020-2030 and what you can do about it.
10/29/2019
Xfinity is Man-in-the-Middle (MITM) Attacking my Internet
by Alex Piechowski
Xfinity injected 581 lines of JavaScript into unencrypted traffic as a data-cap warning, creating MITM risks, accessibility failures, and slower loads.
10/28/2019
Patch Production Faster with Security-oriented Agile Development Practices
by Frank Rietta
Companies take too long to patch production leaving plenty of time for threats to attack! Here's how to fix it with security-oriented Agile practices.
09/06/2019
Ruby Gems Supply Chain Vulnerability
by Frank Rietta
Review of 2019 RubyGems supply chain attacks like bootstrap-sass and rest-client, plus typo-squatted gems, with 5 practical steps to protect your Rails project.
08/22/2019
The Case for 2FA, Post Rest-client Gem CVE
by Christopher Choi
On 08/19/2019, a CVE was discovered on a popular Ruby gem called Rest-client. Although caught quickly, this could raise the case of 2FA being a requirement for Package Manager accounts like Rubygems and NPM.