The Hardest Problem In Application Security - Application Security Weekly