If you want to know about the state of security in Ruby on Rails, checkout @gregmolnar's talk.
https://www.youtube.com/watch?v=Z3DgOix0rIg

#rails #rubysec