Security pros are familiar with the well-known SQL Injection and Shell Injection attacks. But more obscure attacks such as DNS Injection and even Clipper Macro Injection proliferate because many programmers don't know any better. Learn how to write injection-proof code in any language, on any operating system, no matter how hard the boss pushes you to slap a system() call in there and ship it. This presentation is essential for anyone who designs, writes, reviews, tests, audits, compiles, uses, admins, or pays for software.