If we want to really start solving security problems, we have to make sure security isn’t something special we talk about later, or plan to add in version two. If we expect security to just be part of everything, we also can’t expect anyone to see security as a feature they look for. The only thing harder than security is planning for security :)