Cybersecurity Category
Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.
Subscribe to Cybersecurity posts via RSS
10/03/2017
Automate Security Scans with Continuous Integration
by Alex Piechowski
Learn how to automatically run bundle-audit and brakeman in your CI suite with an example for TravisCI.
Read More: Automate Security Scans with Continuous Integration
09/18/2017
Equifax Missed Defense in Depth, Allowing a Massive Data Breach
by Frank Rietta
More than bad patch management, the weakness was Equifax's failure to design with the assumption that the front-end web server would be compromised.
Read More: Equifax Missed Defense in Depth, Allowing a Massive Data Breach
05/18/2017
Troubling ISP Privacy Repeal: The Data Will be Breached
by Frank Rietta
With a green light from Congress & President Trump, your ISP may begin some really creepy business practices that endanger your family's privacy and security.
Read More: Troubling ISP Privacy Repeal: The Data Will be Breached
02/28/2017
Breach Prevention for Developers Talk at Kennesaw State University
by Frank Rietta
As an information security professional, it's critical to know how custom web applications are developed and how that affects application security.
Read More: Breach Prevention for Developers Talk at Kennesaw State University
02/22/2017
Intro to App Sec Podcast Interview
by Frank Rietta
Frank was the guest on the August 29, 2016, Intro to App Sec Episode of the Advanced Persistent Security podcast. Listen here.
01/12/2017
The MongoDB hack and the importance of secure defaults
by Frank Rietta
If you have a MongoDB installation, now would be the time to verify that it is secure. Tim Kadlec has written a must read post.
Read More: The MongoDB hack and the importance of secure defaults
05/10/2016
Bad Password Practices are Responsible For Most Data Breaches. You Can do Better.
by Frank Rietta
Verizon's DBIR says 61% of data breaches result from bad password practices. Your app can avoid some pitfalls with precautions, especially slow hashes and 2FA.
Read More: Bad Password Practices are Responsible For Most Data Breaches. You Can do Better.
03/16/2016
It is not just one iPhone, the FBI wants a future where it is impractical to deploy strong encryption without key escrow
by Frank Rietta
The FBI wants strong encryption without key escrow, which is insecure at scale, to be illegal or impractical. Data breach risks rise as devices get less secure.