I am preety good at programing, even know assembly. But still its really boggles my mind of how these folks acctualy hack?
Start with simple concept like SQL injection or XSS. And keep thinking about how you can use your code in a bad way. Check my blog too - homakov.blogspot.com