OWASP

If you're a web geek interested in security, check out the Open Web Applications Security Project.

Excellent work by top people.