Must read and apply: "TOP 25 Most Dangerous Programming Errors"

Nothing really new here, but still a good reminder for architects and development teams. And nice to see this being pushed to CS curriculums.

 Via http://www.sans.org/top25errors/#s4

Security Corner: Input Filtering

Input filtering is the method by which you validate all incoming data and prevent any invalid data from being used by your application. It's very similar in theory to how water filtering works, where impurities in water are not allowed to pass.

Old but still valid, just look at what did happens to Twitter and Digg this week! And don't forget output filtering too. And here is another good post on the subject.

Tagged Security Web XSS