files for talk at OWASP NOVA 11/09/2006