Julie Powell is an American writer who creates a blog back in 2002. She wrote about an American woman lived in Paris in 1949-or-something that innovates American cooking scenario writing a book (in English) talking about novelle cousine.

Starting from the blog, she wrote a book and eventually, this story becomes a film my and my wife watched it in TV yesterday.

Fact: nobody will use this blog to create a film script. But application security can be also very funny.

(yes, I’ll talk a little bit about security if you read more)

It was a year ago when I started the armoredcode.com project.

The goal, it’s useful to recall it, is to talk to developers about application security. And this evening there are three new security advisories for the Ruby on Rails MVC framework.

With a colleague we were wondering about how much difficult is to create an application security awareness climate in big corporate development team. Please bear in mind that since I’m working in Italy my experience is very narrowed to my country. If you have different stories to tell, please drop them in this post comments area and share them.

Trying to make people aware about security risks they occur writing unsafe code, will make yourself a friend or foe?

Jim Manico is a friend and a rinomated security professional. He announced in Owasp mailing list that a Ruby on Rails cheatsheet is available.

Even before starting writing complex input filters to manage your users’ input, you must care about the password you use on your servers. If they are poor, no application security on Earth would save you against a break-in.