Why would they mention smalltalk? The article is framed from the writer's specific experience with both languages, not as a historical deep dive into the progenitors of Objective-C.
Granted these historical details are super interesting, but feels far from the intent of the article.
> As a simple solution, one could pass a signed auth-hash of the fields generated by form_for, and the server could re-hash the fields submitted to ensure the form data you asked for is what you get (this solves the primary issue with attr_accessible).
It does not solve the issue of javascript generated forms.
Granted these historical details are super interesting, but feels far from the intent of the article.