[LRUG] [COURSE] Security Workshop in January

[Marc Wickenden]

On 12/11/2013 20:26, Graham Ashton wrote:
> a) executing code on the server of any Rails app whose secret token I can get access to [which is frightening], and
>
> b) making sure that I’m not vulnerable to similar exploits (along with a few others) myself.

I'm a security consultant/penetration tester by trade and spend a lot of time poking around webapps and helping developers and businesses protect themselves and their customers, so I'm really glad to see initiatives like Ali's taking off.

I also just felt the need to say what a small world it is because I've been working on our new website recently and it's using Nesta. Then Mr Ashton pops up on the mailing list! A pleasure to make your digital acquaintance sir.

Cheers,

Marc

Marc Wickenden
CEO
4ARMED Ltd

w: http://www.4armed.com
t: https://twitter.com/4ARMED
pgp: 8782 D82C 325C AAF0 96D0  CC4E 7974 D73C B6A8 C560