[mark_l_watson]

This month's Communications of the ACM has a good article by Patrick McKenzie on Rails security, and the mass assignment vulnerability in particular.

[roryokane]

link to that article: http://m.cacm.acm.org/magazines/2011/5/107701-weapons-of-mas...