I can't echo this sentiment enough: If you have a vulnerable application anywhere, on any port it will be found and compromised. If anyone needs convincing, he

I can't echo this sentiment enough: If you have a vulnerable application anywhere, on any port it will be found and compromised. If anyone needs convincing, here's how it will go down: - Google will help them find you. They'll search for things found in pages typically produced by different Rails apps. - They will look at the entire network allocation and scan the whole range. (Try running whois against an IP address.) - If they can identify the hosting platform, it will make it that much easier to know where to look. - Even if you don't show up in the results, your neighbor might and you're next. Edit: formatting.