Only two days after my talk at Ruby and Rails Melbourne I gave another talk, in tandium with Mike Haworth, at Auckland OWASP day conference. The talk is based on the premise that we rely on our web development frameworks provide security by default and we find it suprising when we have security holes that our framework didn’t prevent for us.

Much to myself and Mike’s amusement, the day after the conference,...

I recently gave a talk at the Ruby and Rails Melbourne meetup. The talk itself was a super condensed version of the Ruby on Rails security training that I give.

20 minutes was definitely not enough time to cover everything in enough detail. Most of my slides and material came from my training so creating the slides was relatively simple.

I really enjoyed chatting with people after my talk and learnt some really...

Hey look! It works