like https://groups.google.com/forum/?fromgroups#!forum/rubyonrails-security for rails?