Why you shouldn’t use the OWASP Top 10 as software security requirements · HackerTrans