Since 1999

The Rietta Blog

Since 2005, this publication covers a wide range of topics, including cybersecurity, software development, and cloud migration. It’s a valuable resource for anyone interested in staying informed about these areas.

04/03/2018

Panera Bread Story Is An Example of Why Governor Deal Should Veto SB 315

Panera Bread exposed millions of customer records publicly online through shear technical negligence. I call on Georgia Governor Nathan Deal to VETO SB 315 to protect independent security threat researchers who bring these issues to the light of day so that the public may be protected.

Read More »

03/27/2018

Georgia SB 315, set to criminalize most independent security threat research, heads to Georgia Governor Nathan Deal for signature or veto

As big companies buy cybersecurity insurance rather than fix fundamental security problems, Georgia clears the way for them to press charges or bring civil lawsuits against Good Samaritan researchers.

Read More »

03/26/2018

Georgia SB 315 anti-hacking law dangerously misses the mark of protecting people, making us all less safe

If Georgia SB 315 becomes law, computer security experts will stop reporting vulnerabilities in good faith because doing so could lead to their criminal prosecution under dangerously broad anti-hacking law.

Read More »

10/12/2017

Lay off the marketing plugins. Equifax hit with fake Flash update.

Equifax caught distributing malware. Be careful what you allow to be included in your website to avoid these sorts of hacks.

Read More »

10/11/2017

Automated Patching Will be New Reality

How fast can you update your production web application after an update is released? The answer better be within minutes. Automated testing and deployment is the only way.

Read More »

10/07/2017

Southeast Ruby Conference Recap

A recap on the Rietta team's experience with the Southeast Ruby conference

Read More »

10/03/2017

Automate Security Scans with Continuous Integration

Learn how to automatically run bundle-audit and brakeman in your CI suite with an example for TravisCI.

Read More »

09/18/2017

Equifax Missed Defense in Depth, Allowing a Massive Data Breach

More than bad patch management, the weakness was Equifax's failure to design with the assumption that the front-end web server would be compromised.

Read More »

09/05/2017

Engine Yard's 17 Rails Security Tips

Read More »

05/18/2017

Troubling ISP Privacy Repeal: The Data Will be Breached

With a green light from Congress & President Trump, your ISP may begin some really creepy business practices that endanger your family's privacy and security.

Read More »