Well, what do you already know or use? That's where I started. My story: I'm a PHP programmer who got tired of being ridiculed for by security people for using

Well, what do you already know or use? That's where I started. My story: I'm a PHP programmer who got tired of being ridiculed for by security people for using PHP as my main language, so I decided to go around to popular PHP projects, review their code, and submit vulnerability fixes. This transformed into a dozen or so pull requests and a BSides talk, and is an ongoing effort to clean up their libraries.