Interesting wealth of information from WSJ:
http://projects.wsj.com/surveillance-catalog/#/

I think it's a nice, brief foray into all the common languages as well. You could stumble upon nice tools by accident this way.

Excellent stuff as always by Chris Gates. We have legacy IFS in our infrastructure and just did a massive migration from Solaris app server to Glassfish 3.0 (aka XSS hotbed) and have faced somewhat severe challenges w/ Oracle security. Apparently a lot of fixes in the version we're upgrading to (3.1) but again thanks for the piece, scary insight.

Passed along via B. Schneier:

http://www.crypto-class.org/

Looks interesting