Web Application Security Blogs

First of all, if you read here, but don't read RSnake's blog, shame on you. Having said that, you should already have seen his listing of Web Application Security Blogs. But if not, go visit it now.

I'm honored that I've ended up on RSnake's "once a week" list. I suppose that's fair, because I rarely post anything here that's news. Maybe my goal for this year ought to be to be able to do enough research to make it on his RSS reader.

And you'd better subscribe to his feed. He's about as plugged-in as anybody in the industry.