"If you use the Web in any way then this should be on your bookshelf. In addition to the detailing the threat, Shema also provides countermeasures to minimize or remove the risk, but be warned; you may never look at a Web site the same way again."--Andrew Waite, InfoSanity Research.
Mike Shema writes about information security with an entertaining infusion of music (80s), sci-fi (dystopian), and horror (spooky). He hosts the Application Security Weekly podcast.
Found this to be a hard book to read and wasn't getting a lot out of it so I quit reading it halfway through chapter two. The parts on what the threats were seemed more helpful than the parts about how to prevent the threats.