Overriding Password Request Validation in Drupal 6
I enjoy security audits. Mostly. At least at this point in my career as a web developer I know what to expect and have tackled the obvious things like XSS and SQL injection. Sanitize, fools!
Of course, I got there with no small amount of education and embarrassment.