"Pwning" and "dumping source code" aren't the same. I think code should be written with the assumption that it will be leaked. Getting DB passwords isn't that m

"Pwning" and "dumping source code" aren't the same. I think code should be written with the assumption that it will be leaked. Getting DB passwords isn't that meaningful if you don't have access to the DB because of firewalls.