Speaking as someone who is still, arguably, a "junior dev", and who started reading Hacker News as a far-more-junior dev, getting these topics on your radar has

Speaking as someone who is still, arguably, a "junior dev", and who started reading Hacker News as a far-more-junior dev, getting these topics on your radar has to happen somehow. I've learned about many topics' existence by simply bumping into articles like this, and checking the comments to learn more. I do agree the article is little more than introductory, but rather than complain, let's provide some more in-depth links for those who want to learn: http://www.slideshare.net/guestdb261a/csrfrsa2008jeremiahgrossman-349028/ http://www.slideshare.net/guestdb261a/csrfrsa2008jeremiahgro... http://appsandsecurity.blogspot.com/2012/01/stateless-csrf-protection.html http://appsandsecurity.blogspot.com/2012/01/stateless-csrf-p...