OWASP AppSec DC 2011 - FAQ