I worry that "we do care about security" is increasingly insufficient. It's one thing to care about security, another to think that you take it seriously, and a

I worry that "we do care about security" is increasingly insufficient. It's one thing to care about security, another to think that you take it seriously, and another to actually take it seriously. Depending on the application, the amount of resources you should be expending on security is often times multiple times what a naive person would expect. Security is tricky and subtle, and most people don't realize how wrong they are when it comes to doing things securely.