We cant hack ourselves secure
Web security-–-everything-we-know-is-wrong-eoin-keary
Bcc risk advisory irisscon 2013 - vulnerability management by the numbers and dumb robots!-2