This issue is all about the various reasons information security isn’t taken more seriously by developers. CERT C Secure Coding Standard Open Web Application Security Project Microsoft Bluehat DefCon Security BSides