there was quite a conference in Oslo this year, called NDC. lots of interesting talks are now available online. just seen an interesting one on exploiting techniques, from developer's PoV: insecure coding in C and C++. don't get confused – this is an introductory talk (@ programming conference, after all). among well known and interesting attack vectors ROP technique got itself a bit time as well. generally nice compilation – worth a while.