Rails Against the Machine
summary
Shows a concrete system that identifies and quietly downgrades abusive customers: a Rails reseller model backed by a shared CRM, cached 30‑minute session checks, Sidekiq workers to call CRM and post minimal alerts to Slack, and browser cookies to tag anonymous sessions. Uses AWS WAF rules and GuardDuty for automated blocking and monitoring. Removes features like select-your-own-seat and print‑at‑home for flagged accounts; a real pre‑sale shows flagged resellers not buying while legitimate patrons do, confirming the approach.
AI-written summary · about
chapters (10)
- 0:00Introduction and setup
- 1:21About the speaker
- 4:09Who are bad users
- 7:00Examples of bad users
- 9:27Tools to identify bad users
- 12:41Automating reseller detection
- 15:52Executing the plan
- 17:36Degrading user experience
- 19:02AWS tools for protection
- 20:46Wrap-up and Q&A
related talks
32mRails Security at Scale
38mRails hurts, because you're using it wrong. Let's fix that
35mTales from the Crypt
41m(Re)Building a large scale payments system on Rails
31mRails Application Security in Practice
43m...But Doesn't Rails Take Care of Security for Me?
34mIndustrial Rails
39mExploring Rails anti-patterns