In OWASP We Trust mug

Product Page

If you're in software development, raise some awareness around the office of the OWASP Top 10 vulnerabilities. They're still being found in software even after all this time, which means not enough effort is being made to avoid them.

Garbage people in, garbage persona out

from here

Computer scientists have done it again. Another artificially intelligent racist. Apparently not enough people learned the lesson of Tay. You can't train an AI on unchecked input from arbitrary people on the Internet and expect to wind up with something worthwhile. The assholes among them will do everything they can to spoil it.

I know input validation is probably not the right terminology for the AI context, but in the broader sense the chatbot is a program and malicious input is malicious input.

But bypassWordList might contain hard-coded credentials

from here

I care about application security as much as the next developer (maybe more) but this particular heuristic (and the false alarms it generates) drives me nuts.