ar.rb

class ActiveRecord::Base
  attr_accessible nil

  def update_attributes *args
    raise "Don't call #{self.class.name}#update_attributes. " +
      "Mass assignment is pure evil."
  end
end