Justin Collins
where else to find them
website:https://presidentbeef.com
github:presidentbeef
bluesky:justinkcollins.bsky.social
mastodon:@presidentbeef@ruby.social
speakerdeck:presidentbeef
devto:presidentbeef
what they talk about
all 6 in the filters
where they keep going back
- RailsConf6 editions2014–2019
all 4 in the filters
on a stage with
- Aaron Bedraonce
- Alejandro Corpeñoonce
- Alex Woodonce
all 18 in the filters
who talks about the same things
- Matt Konda4 talks
- Aaron Bedra14 talks
- Bryan Helmkamp14 talks
- Julien Topçu52 talks
- Jim Manico28 talks
- Dwayne McDaniel14 talks
| title | conference | date |
|---|---|---|
| The Unreasonable Struggle of Commercializing Open Source | RailsConf 2019 | 2019-05-01 |
Open source Brakeman becomes a paid product with three pieces: Brakeman Pro desktop (JRubyFX bundled), Pro gem/engine and a Code Climate engine, and steady but… | ||
| The Evolution of Rails Security | RailsConf 2018 | 2018-04-17 |
Chronicle of concrete incidents and fixes: a string of CVEs that include directory‑traversal leading to remote code execution, the GitHub mass‑assignment… | ||
| Taking on the King: Killing Injection Vulnerabilities | OWASP AppSec California 2018 | 2018-01-30 |
Injection stays number one because web apps treat untrusted values as strings and hand them to interpreters; SQL injection is about 20 years old yet still… | ||
| Lightning Talks | RailsConf 2017 | 2017-04-25 |
Thirty tiny demos land as either useful tools or warm anecdotes: a hospital hand‑washing analytics mention and Ada Developers Academy 11% acceptance backing a… | ||
| Practical Static Analysis for Continuous Application Security | AppSecUSA 2016 | 2016-10-11 |
Claims that targeted static analysis is cheap to build and automatable: small grep-based rules or a bash/Ruby script that diffs changed files can flag a… | ||
| ...But Doesn't Rails Take Care of Security for Me? | RailsConf 2016 | 2016-05-04 |
Rails' built‑in protections don't stop logic and deployment mistakes: an unscoped find lets anyone delete other users' payment methods ($2,800 bounty), a… | ||
| Rise of the Machines Security Automation at Twitter | DevOps Enterprise Summit 2015 | 2015-11-03 |
Company faces an FTC order requiring a 20 year information security program after account compromises; by 2012 traffic hits ~300 million tweets/day and a tiny… | ||
| The World of Rails Security | RailsConf 2015 | 2015-04-21 |
Overview of concrete Rails security issues and fixes: historical behavior of mass-assignment and strong parameters, real XSS and CSRF examples (including a… | ||
| Tales from the Crypt | RailsConf 2014 | 2014-04-22 |
A contrived Rails app shows concrete failures and fixes: a rollback to reenable CSRF protection after a Doge site triggers unauthorized orders, leaking up to… | ||
| nothing matches | ||