Open Source Rails projects, make sure you’re safe…

by Kenneth Kalmer on September 27, 2008

An impending doom? Possibly. There was a thread on the Rails Core list not too long ago, titled “Cookie session security and open-source“, and they covered what seems to be an obvious security flaw. I distinctly remember following the events (…)

Read the rest of this entry »

Using hoptoad in open source project deployments

by Kenneth Kalmer on September 26, 2008

It came down on me like a ton of bricks when I deployed the audit updates to our production PowerDNS on Rails setup, hoptoad isn’t installed and any errors would just be gone and forgotten. The solution is pretty simple, (…)

Read the rest of this entry »

PowerDNS on Rails now sports basic audits

by Kenneth Kalmer on September 25, 2008

Just as a quick update on the PowerDNS on Rails project, I’ve just pushed several updates to Github that most profoundly includes support for audits. Other smaller changes are also included, including plugin updates (HAML) and upgrading Rails to 2.0.4. (…)

Read the rest of this entry »

acts_as_audited gains parent record tracking

by Kenneth Kalmer on September 24, 2008

As part of our current line of improvements on PowerDNS on Rails, we needed to start auditing changes made through the interface to the DNS data. This is a logical step to opening the system up for more API based (…)

Read the rest of this entry »