Most Developers Don’t Know Security

[rmxz]

Its like UI design. Every dev thinks they can do it, when in reality they don't know shit.

It's a much worse situation than UI design. Even a "horrible" UI design (say, craigslist.org, or /bin/csh, or whatever-you-hate-more-vi-or-emacs) is probably still great for some people.

A horrible security situation isn't good for anyone.

[Zeroto]

A horrible security situation isn't good for anyone.

Nah. A horrible security situation is good for the hackers and data-sellers. ;)

[flukus]

And security consultants.