My old book I wrote on PHP4 had SQLi in it.. heh. And I still ended up in appsec years later. Been doing that for 15+ years but my roots are software dev, so I

My old book I wrote on PHP4 had SQLi in it.. heh. And I still ended up in appsec years later. Been doing that for 15+ years but my roots are software dev, so I use that and try to have a lot of empathy for developers. When I got started app sec was nascent and just becoming it’s own thing, and many in infosec had a very blame oriented mindset with developers. So it’s great to see how far we have brought things.