Drifting Ruby

Session Hijacking

#400 May 7, 2023 free

In this episode, we explore session hijacking and an approach that we can take to limit the risk. There are some user experience and functionality caveats to this approach so they must be taken into consideration as well.

rails security

reCAPTCHA v2

#282 Feb 7, 2021 free

Reduce the number of bots and spam your Ruby on Rails application gets with Google reCAPTCHA v2.

authentication rails security

Interview with Frank Rietta

#183 Apr 17, 2019 free

In this interview, Frank Rietta, a security expert in web applications, talks about various recommendations for securing a Ruby on Rails application. Many areas are explored from code, staff, servers and infrastructure.

security interview

Restricting Access by IP Address

#92 Aug 6, 2017 free

Learn to lock down your application or parts of your application by IP Addresses.

rails security

Client Side Encryption

#63 Jan 15, 2017 free

Add an extra level of security to your application with client side encryption. Even over an SSL connection, there are attacks which could expose your users' sensitive information. Using JSEncrypt, learn how to encrypt on the client side and decrypt on the server side.

rails security javascript encryption

Security and Static Code Analyzers

#62 Jan 8, 2017 free

Whether you're preparing for a third-party security scan or already doing peer code reviews, you should always run brakeman scanner on your application to identify potential security vulnerabilities.

rails security

Rails API - Throttling with Rack::Attack

#52 Oct 30, 2016 free

Save expensive calculation time using Rack::Attack, we will learn how to limit requests coming into our application. This gem not only limits requests, but can be used to blacklist or whitelist users as well.

rails api security

Authorization with Pundit

#47 Sep 18, 2016 free

Prevent unauthorized access to your application with Pundit; an authorization library for Ruby on Rails which restricts what resources a given user is allowed to access.

rails security authorization

Two Factor Authentication

#46 Sep 11, 2016 free

Add multi factor authentication to your existing authentication solution. This gives your users the option to increase the level of security to their account and help prevent unauthorized access.

rails security authentication

Authentication Crash Course with Devise

#45 Sep 5, 2016 free

Devise is a flexible authentication solution for Rails based on Warden. Learn how to add a stable authentication solution like Devise to your application.

rails security authentication

View

Episodes

Sort

Tags

Session Hijacking

reCAPTCHA v2

Interview with Frank Rietta

Restricting Access by IP Address

Client Side Encryption

Security and Static Code Analyzers

Rails API - Throttling with Rack::Attack

Authorization with Pundit

Two Factor Authentication

Authentication Crash Course with Devise

Learning Paths

Video Logs new

Blog

Merchandise

Forums new

View

Episodes

Sort

Tags

Session Hijacking

reCAPTCHA v2

Interview with Frank Rietta

Restricting Access by IP Address

Client Side Encryption

Security and Static Code Analyzers

Rails API - Throttling with Rack::Attack

Authorization with Pundit

Two Factor Authentication

Authentication Crash Course with Devise