[obsurveyor]

January 8th, 2013 - Multiple vulnerabilities in parameter parsing in Action Pack (CVE-2013-0156) https://groups.google.com/forum/#!topic/rubyonrails-security...

Hacked May, 2013. Blame the exchange's devs who didn't do security updates.