I think the submitter himself said it well in his Rackspace XSS hack: "Web applications are never 100% secure. Also the amount of vulnerabilities previously fo

I think the submitter himself said it well in his Rackspace XSS hack: "Web applications are never 100% secure. Also the amount of vulnerabilities previously found in a product does not directly relate to the current state of security in a product or service. A better measure of this is how quickly the company responds and how they care about security related issues." ~ http://www.evilpacket.net/2009/jul/9/theft-rackspace-cloud-api-key/ http://www.evilpacket.net/2009/jul/9/theft-rackspace-cloud-a... Responding to security issues has got to be crucial to these SaaS web apps. If you can't trust a company to at least be diligent in trying to protect your data, why should you give it to them?