https://mamchenkov.net/wordpress/2015/06/02/alex-stamos-appsec-is-eating-security/