In other news, I started a new site today called Startup Security. You can read the Welcome post, but I mainly created the site because I’ve come across several security issues at startups in the past few months and I want to spread awareness about integrating security into the development life-cycle early on.

In coming days and weeks, I’ll post about different vulnerabilities I’ve come across as well as things to look for if you’re a startup and aren’t familiar with security. The point I’m trying to get across is that security doesn’t have to be a $50,000 investment to be effective. Heck, I could probably spend half-a-day talking to devs and know whether or not they understand security enough to not build a reasonably secure site…

In any case, Check it out at StartupSecurity.info. I hope it becomes a useful resource. :)