Ruby on Rails
Rietta's Ruby on Rails posts cover application security, dependency management, background jobs, database migrations, and Rails tutorials.
01/13/2020
AppSec as a Requirement in the Development Process
by Frank Rietta
A prediction that web application security will not be a post-development plugin you can add to your application in the decade of 2020-2030 and what you can do about it.
09/06/2019
Ruby Gems Supply Chain Vulnerability
by Frank Rietta
Review of 2019 RubyGems supply chain attacks like bootstrap-sass and rest-client, plus typo-squatted gems, with 5 practical steps to protect your Rails project.
08/22/2019
The Case for 2FA, Post Rest-client Gem CVE
by Christopher Choi
On 08/19/2019, a CVE was discovered on a popular Ruby gem called Rest-client. Although caught quickly, this could raise the case of 2FA being a requirement for Package Manager accounts like Rubygems and NPM.
04/29/2019
Are you accidentally storing private data in plain text?
by Frank Rietta
Learn how to prudently minimize the collection of passwords, authentication tokens, and customer private data in your debug logs to protect your company from legal liability.
04/18/2019
New Interview on Drifting Ruby
by Lore Hamilton
Frank Rietta joins Dave Kimura on Drifting Ruby Episode #183 to discuss Rails app security, securing Linux servers, staff access risk, and OWASP Top 10.
11/27/2018
Prevent an Outdated and Broken bin/setup with This Simple Trick
by Alex Piechowski
How often do you run this `bin/setup` if it's only ran when you set up your repo? Most developers setup their environment only every once in awhile. What happens when changes to the codebase happen and the bin/setup isn't modified as well?
09/06/2018
Writing a good bin/setup
by Matt Bettinson
What it takes to write a project setup script to ease on-boarding headaches and reduce company overhead
08/21/2018
Automatically Migrate from Factory Girl to Factory Bot
by Alex Piechowski
Gem updates are tedious. Gem name changes are even more tedious. This quick script converts Factory Girl references to Factory Bot references.
10/07/2017
Southeast Ruby Conference Recap
by Alex Piechowski
Rietta's recap of the South East Ruby Conf in Nashville, covering talks on soft skills, PostgreSQL JSON, open source, chatbots, and shipping working code.