Best of Application Security (Friday, Nov. 27)

Ten of Application Security industry's coolest, most interesting, important, and entertaining links from the past week -- in no particular order. Regularly released until year end. Then the Best of Application Security 2009 will be selected!

• Injection attacks, its not just SQL!
• You’ve been hacked. Now what?
• The meaning of metrics.
• Symantec exposed passwords,serials… SQL Injection, full database access
• Web Application Security Scanner List
• Facebook Worm Uses Clickjacking in the Wild
• Ping pong obfuscation
• Bypassing CSP for fun, no profit
• Client-side JavaScript file processing may come via File API
• Presentations Available: OWASP AppSec DC 2009