OWASP, a PHP Ostrich? | Hacker News Reader