If you are saying "merely hiring more people to review the code won't work," then I agree. [1] If you are saying "hiring more highly-skilled people to review t

If you are saying "merely hiring more people to review the code won't work," then I agree. [1] If you are saying "hiring more highly-skilled people to review the code won't work," then I'll disagree. App sec engineers can be had for the price. [1] I say this despite the fact that this was a bug that leapt out at people who had no security knowledge. The one before this and the one after this won't be like that.