March 30, 2011 Volume 9, issue 3 PDF Weapons of Mass Assignment Patrick McKenzie, Kalzumeus A Ruby on Rails app highlights some serious, yet easily avoided, security vulnerabilities. In May 2010, during a news cycle dominated by users' widespread disgust with Facebook privacy policies, a team of four students from New York University published a request for $10,000 in donations to build a privacy-