Ruby on Rails vulnerable to mass assignment and SQL injection

Ruby on Rails vulnerable to mass assignment and SQL injection

How do you guys who are freelancers or perhaps you work for a company and are the only guy working on a particular app handle security stuff like this?A lot of what I hear is "drop what you are doing and patch this right now!". But of course there are many reasons why this might not be possible. For example you might be on a 15 hour flight with no internet, you might be dealing with some family crisis, you might be in the middle of a coke and sex binge with identical twins who look like Scarlett Johansen or whatever. Do you live glued to your smartphone in constant fear of 0 days? Do you make sure there is some third party available to deal with this stuff? do you design with the possibility of having your app/site owned as a likely event? And how do you make your client/employer aware of the implications of stuff like this?

Full article: http://news.ycombinator.com/item?id=5202489