Ruby on Rails

Rietta's Ruby on Rails posts cover application security, dependency management, background jobs, database migrations, and Rails tutorials.

09/14/2026

RubyGems Open Source Supply Chain Security and OpenAI

OpenAI agents attacked RubyGems in May 2026. Why automated attackers have collapsed the window to patch a critical CVE from weeks to hours.

Read More: RubyGems Open Source Supply Chain Security and OpenAI

09/04/2026

Government Rails Site Hit Hours After CVE Patch

Rietta patched a government client's Ruby on Rails site within hours of a 9.5 CVSS ActiveStorage CVE. Exploit attempts began before business hours resumed.

Read More: Government Rails Site Hit Hours After CVE Patch

02/04/2026

Protect Production SQL Databases from AI/LLM Agentic SQL Query Risks

Prompt injection can talk an LLM agent past a "SELECT only" rule. A read-only replica and lexical SQL validation give deterministic guardrails it can't bypass.

Read More: Protect Production SQL Databases from AI/LLM Agentic SQL Query Risks

01/23/2026

Use AI to Describe Images as a Background Job in Ruby on Rails

Treat AI as a background job in Ruby on Rails: a framework for using OpenAI's API to generate images from a prompt, describe them, and render the metadata.

Read More: Use AI to Describe Images as a Background Job in Ruby on Rails

06/11/2024

A Journey From QBasic Random Access Files to PostgreSQL

The evolution of data storage from a seasoned developer's perspective: from QBasic's random access files to PostgreSQL transactions and multi-user databases.

Read More: A Journey From QBasic Random Access Files to PostgreSQL

02/09/2021

Streamlining Workflows With Docker

Working on numerous projects can require significant time to set up locally. With Docker, we have streamlined this process to mere minutes.

Read More: Streamlining Workflows With Docker

12/15/2020

Learning Object-Oriented Programming in Ruby vs C/C++

Learning object-oriented programming is a fundamental piece of computer science education. But is C/C++ the best environment to do it in?

Read More: Learning Object-Oriented Programming in Ruby vs C/C++

12/12/2020

Remote Team Culture - Code Review and Style Guides

Code review and style guides are valuable when delivering clean and reliable code which is a team effort, especially in distributed teams.

Read More: Remote Team Culture - Code Review and Style Guides

10/07/2020

The convergence of Ruby on Rails and #AppSec Podcast Appearance

Frank Rietta guest on the Application Security Podcast with Chris Romeo

Read More: The convergence of Ruby on Rails and #AppSec Podcast Appearance

04/21/2020

Dependency Security and Hacking Rails with Jason Swett (Podcast)

Podcast interview about Ruby on Rails dependencies, security, state-sponsored hacking, and practical tips on how to protect your organization.

Read More: Dependency Security and Hacking Rails with Jason Swett (Podcast)