webappsec experts and their habits, opinions

Jeremiah Grossman has posted the results and his own commentary on his regular Web App Security Professionals survey. I typically don’t post to surveys because they tend to be self-serving for vendors, but I think Jeremiah has something better than that, especially when profiling the habits of the experts.