Gary McGraw and Steve Lipner
Gary McGraw has a new podcast, “Reality Check” about software security practitioners. The first episode features Steve Lipner. It’s some good insight into how Microsoft is approaching software security.
I’d say more, but as Steve says two or three good things about my threat modeling tool, you might think it some form of conspiracy.
You should go listen.
Are you saying it *isn’t* some sort of conspiracy? :^)