Read voraciously. Join some mailing lists, for a start. Good lists to join include open source community lists, programming lists, and the Security-Basics list at SecurityFocus.

• 多读。加入一些邮件列表,以此为启点。要加入的好的列表包括开源社区列表,编程列表和安全焦点的安全概要列表。