Matias Korhonen's guest appearances

Matias Korhonen

Ruby Rogues

Devchat.tv Episode Roundup

Carina C Zona

Ben Hammersley

Nell Shamrell

Nell Shamrell-Harrington

Paul Dix

Dylan Andrews

Derek Prior

Ben Orenstein

Chad Fowler

Bob Zeidman

Fabio Perrella

Ilya Grigorik

Milap Neupane

Greg Wilson

Jeff Casimir

OwlTail

Tweet this Episode Matias Korhonen has been writing Rails apps professionally at Kisko Labs, a Rails-focused software consultancy in Finland, for almost a decade. In his spare time he works on too many side projects (including Piranhas.co), a book price comparison site, and TLS.care (an SSL certificate monitoring service). He also somehow manages to find time to homebrew beer. The Rogues talk to Matias about securing your Rails applications. Rails comes with a lot of security features built in, but you can still leave yourself open to exploitation if you're not careful. Most of these problems occur in the portion of the app your write as opposed to the parts of the app that Rails handles for you. We go over several tools and techniques for making sure your application, access, and data are all secure. In particular, we dive pretty deep on:  Tools that you can use to scan for vulnerabilities or add more security checks to your applications Authentication and authorization mistakes Securely managing data and much, much more...  Links:  secureheaders brakeman Code Climate CloudFlare zxcvbn Troy Hunt article on pwned passwords Devise Security Extension pundit Drifting Ruby episode on Complex Strong Parameters gemnasium bundler-audit OWASP Zed Attack Proxy Project rack-attack  Picks: Brian:  Regex 101 Give and Take by Adam Grant  Eric:  Indie Hackers  Dave:  Sumo Logic  Chuck:  Ready Player One Comic-Con trailer breakdown Mattermost Ruby Rogues Parley Ruby Dev Summit (FREE)  Matias:  Webpacker 3.0 ActiveStorage Heroku

<h2><a href="https://ctt.ec/yaj5h" rel="nofollow" target="_blank">Tweet this Episode</a></h2> Matias Korhonen has been writing Rails apps professionally at <a href="http://kiskolabs.com" rel="nofollow" target="_blank">Kisko Labs</a>, a Rails-focused software consultancy in Finland, for almost a decade. In his spare time he works on too many side projects (including <a href="http://piranhas.co" rel="nofollow" target="_blank">Piranhas.co</a>), a book price comparison site, and <a href="http://tls.care" rel="nofollow" target="_blank">TLS.care</a> (an SSL certificate monitoring service). He also somehow manages to find time to homebrew beer. The Rogues talk to Matias about securing your Rails applications. Rails comes with a lot of security features built in, but you can still leave yourself open to exploitation if you're not careful. Most of these problems occur in the portion of the app your write as opposed to the parts of the app that Rails handles for you. We go over several tools and techniques for making sure your application, access, and data are all secure. In particular, we dive pretty deep on: <ul> <li>Tools that you can use to scan for vulnerabilities or add more security checks to your applications</li> <li>Authentication and authorization mistakes</li> <li>Securely managing data</li> <li>and much, much more...</li> </ul> Links: <ul> <li><a href="https://github.com/twitter/secureheaders" rel="nofollow" target="_blank">secureheaders</a></li> <li><a href="https://github.com/presidentbeef/brakeman" rel="nofollow" target="_blank">brakeman</a></li> <li><a href="https://codeclimate.com/" rel="nofollow" target="_blank">Code Climate</a></li> <li><a href="http://cloudflare.com" rel="nofollow" target="_blank">CloudFlare</a></li> <li><a href="https://github.com/dropbox/zxcvbn" rel="nofollow" target="_blank">zxcvbn</a></li> <li><a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/" rel="nofollow" target="_blank">Troy Hunt article on pwned passwords</a></li> <li><a href="https://github.com/phatworx/devise_security_extension" rel="nofollow" target="_blank">Devise Security Extension</a></li> <li><a href="https://github.com/elabs/pundit" rel="nofollow" target="_blank">pundit</a></li> <li><a href="https://www.driftingruby.com/episodes/complex-strong-parameters" rel="nofollow" target="_blank">Drifting Ruby episode on Complex Strong Parameters</a></li> <li><a href="https://gemnasium.com/" rel="nofollow" target="_blank">gemnasium</a></li> <li><a href="https://github.com/rubysec/bundler-audit" rel="nofollow" target="_blank">bundler-audit</a></li> <li><a href="https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project" rel="nofollow" target="_blank">OWASP Zed Attack Proxy Project</a></li> <li><a href="https://github.com/kickstarter/rack-attack" rel="nofollow" target="_blank">rack-attack</a></li> </ul> <h3>Picks:</h3> Brian: <ul> <li><a href="https://regex101.com/" rel="nofollow" target="_blank">Regex 101</a></li> <li><a href="http://amzn.to/2xmfUv2" rel="nofollow" target="_blank">Give and Take by Adam Grant</a></li> </ul> Eric: <ul> <li><a href="https://www.indiehackers.com/" rel="nofollow" target="_blank">Indie Hackers</a></li> </ul> Dave: <ul> <li><a href="https://www.sumologic.com/" rel="nofollow" target="_blank">Sumo Logic</a></li> </ul> Chuck: <ul> <li><a href="https://www.youtube.com/watch?v=Trhv4Gi6fy4" rel="nofollow" target="_blank">Ready Player One Comic-Con trailer breakdown</a></li> <li><a href="https://about.mattermost.com/" rel="nofollow" target="_blank">Mattermost</a></li> <li>Ruby Rogues Parley</li> <li><a href="http://rubydevsummit.com" rel="nofollow" target="_blank">Ruby Dev Summit (FREE)</a></li> </ul> Matias: <ul> <li><a href="https://github.com/rails/webpacker" rel="nofollow" target="_blank">Webpacker 3.0</a></li> <li><a href="https://github.com/rails/rails/tree/master/activestorage" rel="nofollow" target="_blank">ActiveStorage</a></li> <li><a href="http://heroku.com" rel="nofollow" target="_blank">Heroku</a></li></ul>

RR 328: Rails Security Beyond the Defaults with Matias Korhonen

Tweet this EpisodeMatias Korhonen has been writing Rails apps professionally at Kisko Labs, a Rails-focused software consultancy in Finland, for almost a decade. In his spare time he works on too many side projects (including Piranhas.co), a book price comparison site, and TLS.care (an SSL certificate monitoring service). He also somehow manages to find time to homebrew beer.The Rogues talk to Matias about securing your Rails applications. Rails comes with a lot of security features built in, but you can still leave yourself open to exploitation if you're not careful. Most of these problems occur in the portion of the app your write as opposed to the parts of the app that Rails handles for you. We go over several tools and techniques for making sure your application, access, and data are all secure.In particular, we dive pretty deep on: Tools that you can use to scan for vulnerabilities or add more security checks to your applications Authentication and authorization mistakes Securely managing data and much, much more...Links: secureheaders brakeman Code Climate CloudFlare zxcvbn Troy Hunt article on pwned passwords Devise Security Extension pundit Drifting Ruby episode on Complex Strong Parameters gemnasium bundler-audit OWASP Zed Attack Proxy Project rack-attackPicks:Brian: Regex 101 Give and Take by Adam GrantEric:Indie HackersDave:Sumo LogicChuck: Ready Player One Comic-Con trailer breakdown Mattermost Ruby Rogues Parley Ruby Dev Summit (FREE)Matias: Webpacker 3.0 ActiveStorage HerokuSpecial Guest: Matias Korhonen.

<a href="https://ctt.ec/yaj5h" rel="nofollow" target="_blank">Tweet this Episode</a>Matias Korhonen has been writing Rails apps professionally at <a href="http://kiskolabs.com" rel="nofollow" target="_blank">Kisko Labs</a>, a Rails-focused software consultancy in Finland, for almost a decade. In his spare time he works on too many side projects (including <a href="http://piranhas.co" rel="nofollow" target="_blank">Piranhas.co</a>), a book price comparison site, and <a href="http://tls.care" rel="nofollow" target="_blank">TLS.care</a> (an SSL certificate monitoring service). He also somehow manages to find time to homebrew beer.The Rogues talk to Matias about securing your Rails applications. Rails comes with a lot of security features built in, but you can still leave yourself open to exploitation if you're not careful. Most of these problems occur in the portion of the app your write as opposed to the parts of the app that Rails handles for you. We go over several tools and techniques for making sure your application, access, and data are all <a href="http://secure.In" rel="nofollow" target="_blank">secure.In</a> particular, we dive pretty deep on:<ul> <li>Tools that you can use to scan for vulnerabilities or add more security checks to your applications</li> <li>Authentication and authorization mistakes</li> <li>Securely managing data</li> <li>and much, much more...</li></ul>Links:<ul> <li><a href="https://github.com/twitter/secureheaders" rel="nofollow" target="_blank">secureheaders</a></li> <li><a href="https://github.com/presidentbeef/brakeman" rel="nofollow" target="_blank">brakeman</a></li> <li><a href="https://codeclimate.com/" rel="nofollow" target="_blank">Code Climate</a></li> <li><a href="http://cloudflare.com" rel="nofollow" target="_blank">CloudFlare</a></li> <li><a href="https://github.com/dropbox/zxcvbn" rel="nofollow" target="_blank">zxcvbn</a></li> <li><a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/" rel="nofollow" target="_blank">Troy Hunt article on pwned passwords</a></li> <li><a href="https://github.com/phatworx/devise_security_extension" rel="nofollow" target="_blank">Devise Security Extension</a></li> <li><a href="https://github.com/elabs/pundit" rel="nofollow" target="_blank">pundit</a></li> <li><a href="https://www.driftingruby.com/episodes/complex-strong-parameters" rel="nofollow" target="_blank">Drifting Ruby episode on Complex Strong Parameters</a></li> <li><a href="https://gemnasium.com/" rel="nofollow" target="_blank">gemnasium</a></li> <li><a href="https://github.com/rubysec/bundler-audit" rel="nofollow" target="_blank">bundler-audit</a></li> <li><a href="https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project" rel="nofollow" target="_blank">OWASP Zed Attack Proxy Project</a></li> <li><a href="https://github.com/kickstarter/rack-attack" rel="nofollow" target="_blank">rack-attack</a></li></ul>Picks:Brian:<ul> <li><a href="https://regex101.com/" rel="nofollow" target="_blank">Regex 101</a></li> <li><a href="http://amzn.to/2xmfUv2" rel="nofollow" target="_blank">Give and Take by Adam Grant</a></li></ul>Eric:<ul><li><a href="https://www.indiehackers.com/" rel="nofollow" target="_blank">Indie Hackers</a></li></ul>Dave:<ul><li><a href="https://www.sumologic.com/" rel="nofollow" target="_blank">Sumo Logic</a></li></ul>Chuck:<ul> <li><a href="https://www.youtube.com/watch?v=Trhv4Gi6fy4" rel="nofollow" target="_blank">Ready Player One Comic-Con trailer breakdown</a></li> <li><a href="https://about.mattermost.com/" rel="nofollow" target="_blank">Mattermost</a></li> <li>Ruby Rogues Parley</li> <li><a href="http://rubydevsummit.com" rel="nofollow" target="_blank">Ruby Dev Summit (FREE)</a></li></ul>Matias:<ul> <li><a href="https://github.com/rails/webpacker" rel="nofollow" target="_blank">Webpacker 3.0</a></li> <li><a href="https://github.com/rails/rails/tree/master/activestorage" rel="nofollow" target="_blank">ActiveStorage</a></li> <li><a href="http://heroku.com" rel="nofollow" target="_blank">Heroku</a></li></ul>Special Guest: Matias Korhonen.

Tweet this EpisodeMatias Korhonen has been writing Rails apps professionally at Kisko Labs, a Rails-focused software consultancy in Finland, for almost a decade. In his spare time he works on too many side projects (including Piranhas.co), a book price comparison site, and TLS.care (an SSL certificate monitoring service). He also somehow manages to find time to homebrew beer.The Rogues talk to Matias about securing your Rails applications. Rails comes with a lot of security features built in, but you can still leave yourself open to exploitation if you're not careful. Most of these problems occur in the portion of the app your write as opposed to the parts of the app that Rails handles for you. We go over several tools and techniques for making sure your application, access, and data are all secure.In particular, we dive pretty deep on: Tools that you can use to scan for vulnerabilities or add more security checks to your applications Authentication and authorization mistakes Securely managing data and much, much more... Links: secureheaders brakeman Code Climate CloudFlare zxcvbn Troy Hunt article on pwned passwords Devise Security Extension pundit Drifting Ruby episode on Complex Strong Parameters gemnasium bundler-audit OWASP Zed Attack Proxy Project rack-attack Picks:Brian: Regex 101 Give and Take by Adam Grant Eric:Indie HackersDave:Sumo LogicChuck: Ready Player One Comic-Con trailer breakdown Mattermost Ruby Rogues Parley Ruby Dev Summit (FREE) Matias: Webpacker 3.0 ActiveStorage Heroku Special Guest: Matias Korhonen.   Advertising Inquiries: https://redcircle.com/brandsPrivacy &amp; Opt-Out: https://redcircle.com/privacy

<a href="https://ctt.ec/yaj5h" rel="nofollow" target="_blank">Tweet this Episode</a>Matias Korhonen has been writing Rails apps professionally at <a href="http://kiskolabs.com" rel="nofollow" target="_blank">Kisko Labs</a>, a Rails-focused software consultancy in Finland, for almost a decade. In his spare time he works on too many side projects (including <a href="http://piranhas.co" rel="nofollow" target="_blank">Piranhas.co</a>), a book price comparison site, and <a href="http://tls.care" rel="nofollow" target="_blank">TLS.care</a> (an SSL certificate monitoring service). He also somehow manages to find time to homebrew beer.The Rogues talk to Matias about securing your Rails applications. Rails comes with a lot of security features built in, but you can still leave yourself open to exploitation if you're not careful. Most of these problems occur in the portion of the app your write as opposed to the parts of the app that Rails handles for you. We go over several tools and techniques for making sure your application, access, and data are all <a href="http://secure.In" rel="nofollow" target="_blank">secure.In</a> particular, we dive pretty deep on:<ul> <li>Tools that you can use to scan for vulnerabilities or add more security checks to your applications</li> <li>Authentication and authorization mistakes</li> <li>Securely managing data</li> <li>and much, much more...</li> </ul>Links:<ul> <li><a href="https://github.com/twitter/secureheaders" rel="nofollow" target="_blank">secureheaders</a></li> <li><a href="https://github.com/presidentbeef/brakeman" rel="nofollow" target="_blank">brakeman</a></li> <li><a href="https://codeclimate.com/" rel="nofollow" target="_blank">Code Climate</a></li> <li><a href="http://cloudflare.com" rel="nofollow" target="_blank">CloudFlare</a></li> <li><a href="https://github.com/dropbox/zxcvbn" rel="nofollow" target="_blank">zxcvbn</a></li> <li><a href="https://www.troyhunt.com/introducing-306-million-freely-downloadable-pwned-passwords/" rel="nofollow" target="_blank">Troy Hunt article on pwned passwords</a></li> <li><a href="https://github.com/phatworx/devise_security_extension" rel="nofollow" target="_blank">Devise Security Extension</a></li> <li><a href="https://github.com/elabs/pundit" rel="nofollow" target="_blank">pundit</a></li> <li><a href="https://www.driftingruby.com/episodes/complex-strong-parameters" rel="nofollow" target="_blank">Drifting Ruby episode on Complex Strong Parameters</a></li> <li><a href="https://gemnasium.com/" rel="nofollow" target="_blank">gemnasium</a></li> <li><a href="https://github.com/rubysec/bundler-audit" rel="nofollow" target="_blank">bundler-audit</a></li> <li><a href="https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project" rel="nofollow" target="_blank">OWASP Zed Attack Proxy Project</a></li> <li><a href="https://github.com/kickstarter/rack-attack" rel="nofollow" target="_blank">rack-attack</a></li> </ul>Picks:Brian:<ul> <li><a href="https://regex101.com/" rel="nofollow" target="_blank">Regex 101</a></li> <li><a href="http://amzn.to/2xmfUv2" rel="nofollow" target="_blank">Give and Take by Adam Grant</a></li> </ul>Eric:<ul><li><a href="https://www.indiehackers.com/" rel="nofollow" target="_blank">Indie Hackers</a></li></ul>Dave:<ul><li><a href="https://www.sumologic.com/" rel="nofollow" target="_blank">Sumo Logic</a></li></ul>Chuck:<ul> <li><a href="https://www.youtube.com/watch?v=Trhv4Gi6fy4" rel="nofollow" target="_blank">Ready Player One Comic-Con trailer breakdown</a></li> <li><a href="https://about.mattermost.com/" rel="nofollow" target="_blank">Mattermost</a></li> <li>Ruby Rogues Parley</li> <li><a href="http://rubydevsummit.com" rel="nofollow" target="_blank">Ruby Dev Summit (FREE)</a></li> </ul>Matias:<ul> <li><a href="https://github.com/rails/webpacker" rel="nofollow" target="_blank">Webpacker 3.0</a></li> <li><a href="https://github.com/rails/rails/tree/master/activestorage" rel="nofollow" target="_blank">ActiveStorage</a></li> <li><a href="http://heroku.com" rel="nofollow" target="_blank">Heroku</a></li> </ul>Special Guest: Matias Korhonen. Advertising Inquiries: <a href="https://redcircle.com/brands" rel="nofollow" target="_blank">https://redcircle.com/brands</a> Privacy &amp; Opt-Out: <a href="https://redcircle.com/privacy" rel="nofollow" target="_blank">https://redcircle.com/privacy</a>