However, this is overall a good book on the subject.
While MS may not seem like the best source for security information, this really is a good book. Unlike the person ranting in another review, I personally don't care whether Bill Gates and MS is good or evil, or whether the security initiative at MS is a hoax or an honest effort. I care if this book can help me create a better, more secure ASP.NET application. And in that is is a success.
4 stars rather than 5 because the book is a little dry, and not exactly a page turner. However, there are things in here (like the section on hashing passwords) that will really make a difference in the security of your application.