In network and application security since mid-90's. Done quite a lot of different things, starting from low-level penetration testing, embedded devices design, EU electronic signature consulting and large scale application security management. Active member of OWASP. Author of WebCookies.info and CSPBuilder.info. Writing at two blogs: IPSec.pl (English/Polish) and Echelon.pl (Polish only).