“There really isn’t anything new in security,” said Bill Hoffman, lead researcher at SPI Dynamics. “Anyone who says there is, is lying.”

As always, functionality has outstripped security, but the situation is not hopeless, Hoffman said. As Web applications mature, “we’re starting to see minimum standards for security as vendors start to realize the importance of Web security.”

Not sure whether this has already been posted...