I find that when looking for [implementation based] security vulnerabilities it is good to start with places where developers probably don’t really know what they are doing, but feel really good about the solutions that they have come up with. — moxie@thoughtcrime.org
Comments