Ruby on Rails
Rietta's Ruby on Rails posts cover application security, dependency management, background jobs, database migrations, and Rails tutorials.
Subscribe to Ruby on Rails posts via RSS
02/06/2020
Dependency Management and Security
by Chris Choi
Security conscious developers can avoid security pitfalls in their own code, but what about the code that the developer did not write but is using?
01/13/2020
AppSec as a Requirement in the Development Process
by Frank Rietta
A prediction that web application security won't be a post-development plugin in the 2020-2030 decade, and what you can do about it.
Read More: AppSec as a Requirement in the Development Process
09/06/2019
Ruby Gems Supply Chain Vulnerability
by Frank Rietta
Review of 2019 RubyGems supply chain attacks like bootstrap-sass and rest-client, plus typo-squatted gems, with 5 practical steps to protect your Rails project.
08/22/2019
The Case for 2FA, Post Rest-client Gem CVE
by Christopher Choi
On 08/19/2019, a CVE was found in the popular Ruby gem Rest-client. Though caught quickly, it raises the case for requiring 2FA on RubyGems and NPM accounts.
04/29/2019
Are you accidentally storing private data in plain text?
by Frank Rietta
Learn to minimize the passwords, authentication tokens, and customer private data in your debug logs to protect your company from legal liability.
Read More: Are you accidentally storing private data in plain text?
04/18/2019
New Interview on Drifting Ruby
by Lore Hamilton
Frank Rietta joins Dave Kimura on Drifting Ruby Episode #183 to discuss Rails app security, securing Linux servers, staff access risk, and OWASP Top 10.
11/27/2018
Prevent an Outdated and Broken bin/setup with This Simple Trick
by Alex Piechowski
Most developers only run bin/setup once in a while. What happens when the codebase changes and bin/setup isn't updated? A simple trick keeps it from breaking.
Read More: Prevent an Outdated and Broken bin/setup with This Simple Trick
09/06/2018
Writing a good bin/setup
by Matt Bettinson
What it takes to write a project setup script to ease on-boarding headaches and reduce company overhead
08/21/2018
Automatically Migrate from Factory Girl to Factory Bot
by Alex Piechowski
Gem updates are tedious. Gem name changes are even more tedious. This quick script converts Factory Girl references to Factory Bot references.
Read More: Automatically Migrate from Factory Girl to Factory Bot
10/07/2017
Southeast Ruby Conference Recap
by Alex Piechowski
Rietta's recap of the South East Ruby Conf in Nashville, covering talks on soft skills, PostgreSQL JSON, open source, chatbots, and shipping working code.