Best of Application Security (Friday, Aug. 21)

Ten of Application Security industry's coolest, most interesting, important, and entertaining links from the past week -- in no particular order. Regularly released until year end. Then the Best of Application Security 2009 will be selected!

• Security bugs crawl all over financial giant’s website (Ameriprise Website Riddled With Security Vulnerabilities For At Least Five Months)
• TJX Hacker Charged With Heartland, Hannaford Breaches
• Adobe Flex 3.3 SDK DOM-Based XSS
• Web Security is about Scalability
• Bypassing OWASP ESAPI XSS Protection inside Javascript
• Facebook personal info leak vulnerability
• Super-safe Web browsing
• Overcoming Objections to an Application Security Program
• Security No-Brainer #9: Application Vulnerability Scanners Should Communicate with Application Firewalls
• WASC WHID 2009 Bi-Annual Report