Anything that teaches developers about security is a good thing including his article. One minor nit - ASP.NET has been mostly shielded from these types of thi

Anything that teaches developers about security is a good thing including his article. One minor nit - ASP.NET has been mostly shielded from these types of things for 6 or 7 years. He used ASP.NET in his examples which meant he purposely turned off several protections to get the examples to work.