0x0badc0de the RoR way Description: Ruby on Rails (RoR) is an open source web application framework based on the Ruby programming language, that's been around now for over five years. The popularity this framework has gained within the recent past might not solely be based on some serious advertisement efforts, but also - and more likely so - on its broad use in agile/rapid development, condemning repetition, while emphasizing Convention over Configuration principles. In this talk, we will take a closer look on RoR from a code auditor's perspective: Besides a basic overview of the Rails framework and its security mechanisms, developers' common pitfalls will be layed out, and both general web application flaws as well as RoR specific issues will be discussed. All in all, attendees can expect a code centric walkthrough of Ruby on Rails security.