Nobody&#x27;s actually still exposing rails sites to the internet are they? I mean except as a honeypot.<p>The rails team&#x27;s approach to security (it&#x27;s the application&#x27;s problem) has been consistent. At this point if you&#x27;re letting the wild Internet touch your rails apps it&#x27;s probably your own fault.