I just wrapped up a post over on the SDL blog with some comments about an article on Google's security work.
PingBack from http://www.easycoded.com/security-is-bigger-than-finding-and-fixing-bugs/