After seeing some of the security flaws in Ruby on Rails, I have the impression that a book of standards for handling user data is needed. However, I do not hav

After seeing some of the security flaws in Ruby on Rails, I have the impression that a book of standards for handling user data is needed. However, I do not have a degree myself, and I don't have much respect for higher CS education in the US. There have been too many certifications and education programs based on knowing APIs (which has nothing to do with good engineering), too many people learning Java and UML and comming out of college knowing nothing of use for the real world. I personally don't want there to become a profession of programming which excludes people such as myself. But if one does form, we need to make sure that it is based on actual technical principles, and not knowlege of a product be it Microsoft, Redhat or Java.