Defending Web 2.0 Security Soft Spots

Google rang out the old year scrambling to patch a cross-site scripting hack that left its web apps vulnerable to exploits. Such hacks are inevitable in just about any distributed architecture, but is the collective Web 2.0 development community taking a proactive approach to addressing these threats? Jeremiah Grossman of Whitehat Security, compiled a TODO list that highlights the need for best practices and security tools specifically geared toward web application development:
2007 web application security project ideas

Posted by John Dorsey at 07:52 PM  Permalink