Started reading The Art of Software Security Assessment by Mark Dowd, John McDonald, Justin Schuh

if you want to be able to mark your comment as authentic or delete it later, include your e-mail address (it won't be shown on the site). you'll be e-mailed instructions with a copy of your comment.