Insecurity is Ruby on Rails Best Practice

Interesting, if not entirely new. I don't see anything RoR-specific in that problem, though.