Again? We need a single website alerting RoR devs about vulnerabilities.
I shouldn't have to found out about these things on HackerNews.
Someone build this website for us RoR devs, pretty please? (ps. use PHP - heh)
back
5 comments
This is the Ruby on Rails Security mailing list:
https://groups.google.com/forum/#!forum/rubyonrails-security
you can view it in the browser but unlike with a vanilla website, you can also receive notifications via an email.
Heroku does a good job of notifying its users.
Sounds like a RoR bat-signal!
Twitter works great for this.
You could always wait till the server gets compromised, then the customers could alert you?
Actually, that's how security vulnerabilities are normally handled in the Ruby on Rails world.
What, you think I'm joking? Think again: http://arstechnica.com/business/2012/03/hacker-commandeers-g...