Quote: “Is it more statistics? Is it more security tips and hardening guides? Is it more interviews with awesome people like Stefan Esser, you tell us.”

The answer would be yes (as in “Yes, I would like to see more of all three options”). :-)

RST, heh… ok then :)

When I first started reading this site, how I saw it developing in my mind was sort of an average-joe-blogger’s guide to security which would keep track of blog security vulnerabilties by describing them simply and giving whenever possible a fix/solution simple enough for most to understand. In other words, a way for people to keep up on security issues for their blogs without having to subscribe to bugtraq, security feeds, etc, find advisories relating to them, and then be able to read/understand them like a penn-tester would. There’s been some of that since then but not terribly much and I think it would be great to have something of the sort as a section on this blog.

You’ve shown you’re not just limited to that though and I think you should keep going with any sort of posts/projects/interviews that raise awareness and draw more people into the circle of those interested in trying to work on solutions that could make the situation better. That is part of the goal, correct?

I think people might appreciate more how-to guides on little things they can do to minimize chances of getting hacked, etc.

BTW, one of the oddities of blogging is that if you specifically ask for comments/feedback suddenly nobody has anything to say (well, except for me).

Jason

Jason, I think providing articles and information for the average blogger is definately part of our goals, and yes, requests for comments are often not successful but good chaps like yourself always leave behind a pearl of wisdom :)