In this wide-ranging discussion about Rails security Frank and I talk about the security value of keeping gems updated, the security risk of infrequent deployment, state-sponsored hacking, and much more.