Dana Epp's Blog
Security (de)engineering for fun and profit
Learn the rules of engagement when pentesting APIs.