hack.lu: Breaking and Securing Web Applications

At hack.lu, the best talk so far is Nitesh Dhanjani’s talk Breaking and Securing Web applications. Random notes below the fold.