Cybersecurity Category
Rietta's cybersecurity posts cover phishing defense, secure passwords and passphrases, and practical web application security and performance guidance.
Subscribe to Cybersecurity posts via RSS
02/05/2016
What is the difference between bcrypt and SHA256?
by Frank Rietta
TL;DR: SHA1, SHA256, and SHA512 are fast hashes and bad for passwords. BCRYPT is a slow hash and good for passwords. Always use slow hashes, never fast ones.
Read More: What is the difference between bcrypt and SHA256?
10/15/2015
Ruby Application Security Talk Featured in Ruby Weekly Issue # 268
by Frank Rietta
My Rocky Mountain Ruby 2015 talk, "Defending Against Data Breaches, as a Practicing Ruby Developer," was featured in Ruby Weekly issue #268.
Read More: Ruby Application Security Talk Featured in Ruby Weekly Issue # 268
05/04/2015
Uniqueness Validation Race Condition in Ruby on Rails applications
by Frank Rietta
Race conditions slip into production easily. 'validates :field_name, uniqueness: true' won't prevent duplicates; enforce data integrity with unique indexes too.
Read More: Uniqueness Validation Race Condition in Ruby on Rails applications
02/19/2015
New Video! Understanding & Defending Against Data Breaches
by Frank Rietta
Customer data breaches are happening at an increasing rate. Most are preventable; some would have been stopped by two factor authentication for staff access.
Read More: New Video! Understanding & Defending Against Data Breaches
01/09/2015
Two new videos! How a Ruby on Rails developer can help prevent a Data Breach
by Frank Rietta
Videos on data breaches and Ruby on Rails are now on YouTube! Level up your security knowledge, because good software security needs to be a moral stance!
Read More: Two new videos! How a Ruby on Rails developer can help prevent a Data Breach
10/16/2014
How To Protect Against the POODLE SSLv3 Vulnerability
by Frank Rietta
Read More: How To Protect Against the POODLE SSLv3 Vulnerability
10/13/2014
Commercial Information Security Classification System
by Frank Rietta
Read More: Commercial Information Security Classification System
10/07/2014
Government vs Security - Schneier explains
by Brandon Dees
Law enforcement is upset over Apple and Google's stronger mobile encryption. Bruce Schneier explains why you can't build a backdoor only the good guys can use.
10/02/2014
Raspberry Pi crypto key management project!
by Frank Rietta
A dedicated offline crypto key management system OpenPGP and an SSL Certificate Authority set up for air-gapped operations using a Raspberry Pi B.