Joe Walker gave a standout talk on Web Application Security at The Ajax Experience. I love to watch people leaving this talk as they are usually gasping as they realise that we are not secure Joe has posted the slides from his talk, and has provided some great resources:

More: continued here