Dana Epp's Blog
Security (de)engineering for fun and profit
Learn how to reverse engineer an undocumented API using your own rogue docs.