Posted by Michal Zalewski on Jul 08
Um, really? The all-too-common expertise extremes are both veryundesirable, and I don't see any value in arguing over which one is
better than the other.
The archetypal "net" security guy who doesn't understand SOP or the
consequences of <script>-related mixed content when auditing a web app
is about as harmful as a "web app" security guy who can't tell an
integer overflow from a format string bug - that...