[t0mbstone]

What's kind of interesting about this is the fact that it is able to just blindly dump environment variables.

For a long time, environment variables have been evangelized as the secure place to store credentials and things, but that just gives third party scripts a known place to look.

You could argue that might actually be more secure to store your secrets in a separate, custom config file that gets read into the rails app via an initializer or something.