Dana Epp's Blog
Security (de)engineering for fun and profit
Check out the 5 essential books that every API hacker should read and keep on their bookshelf.