Please, if anyone's reading this, do not release a proof-of-concept until everyone has a chance to patch. (I sense there are a lot of already busy Rails developers today).<p>By the way, what do freelancers on HN feel about general responsibility for security maintenance after the work has been done?