Joern Schneeweisz is a Security Consultant over at Recurity Labs by day. As findings bugs ~ 8hrs a day is not enough for him, he digs for bugs in Ruby on Rails apps in his spare time as well. By that he can look back to almost 5 years of bug hunting in both Ruby on Rails applications and the framework itself.

Talk to me about everything which is Ruby on Rails Security related of course.
Other topics of interest are: Web Application Security (especially Server-side) and Source Code audit approaches.