for a programmer, you'd think he would care more about security