It's MONDAY, and I wanted to send over the shorts we did with Chris Eng and Ben Edwards. I think there's a lot of value in a robust question and answer session with paper authors. Too often papers are supposed to stand on their own without any real discussion.
(PHP IS DOUBLE PLUS UNGOOD)
(CVSS, an INTRODUCTION TO FAIL)
(XXE)
Right now I'm editing the next in the series, which I think you will like, which is a more in-depth discussion on vulnerabilities and prioritization and dinosaurs.
-dave