> Why teach security in a programming languages course? Doesn’t it belong in, well, a security course? Because most software developers have no idea what secur

> Why teach security in a programming languages course? Doesn’t it belong in, well, a security course? Because most software developers have no idea what security is. By most I mean almost all. This point is easily proven. Ask any software developer what security is and compare their answer against the standard answer. All security courses and certifications I have seen define security in exactly the same way. If people wanted to take security seriously in software they would train their developers on security or require that they be security certified. > I believe that if we are to solve our security problems, then we must build software with security in mind right from the start. Yes, but clearly most organizations don't take security seriously. Instead they bolt it on at the end just enough to appease the corporate attorneys the same way they do for accessibility or any other necessary requirement whose absence results in class action lawsuits.