That "works exactly the same way today as it did three years ago" point really hit home. We had a major workflow break last year when a cloud service ...

You're right about the broad categories. I've seen that with "Input Validation" too. It can be anything from a missing length check to a full SQLi pat...