Rails SQL injection vulnerability: hold your horses, here are the factsUpdate: see also the article Securing the Rails session secret. Update 2: a statement from Michael Koziarski of the Rails security team regarding the severity of this bug has been added. He urges people to upgrade immediately. Please scroll to the “Conclusion” section for details. Update 3: new advisories (CVE-2013-0155 and CVE-2013-0156) have been published. These vulnerabilities are unrelated to
Scaling Twitter » SlideShare
