Well even Google still has tons of bugs (including XSS and XSRF). Nowadays it's not possible to write applications without knowledge of XSS, XSRF, SQLi, redire

Well even Google still has tons of bugs (including XSS and XSRF). Nowadays it's not possible to write applications without knowledge of XSS, XSRF, SQLi, redirects etc.etc. The security amount you have to understand is just getting ridiculous. And let's not even mention DOS. No-one is securing against that and most servers can be made inaccessible by a simple script that just opens connections.