Security Lessons Learned from the Diaspora Launch -- great explanation of the programming mistakes that were in the Diaspora code, and the security risks that resulted. Again, I recommend the OWASP site if you aren't aware of the types of security mistakes you are making.