http://feedproxy.google.com/~r/Securityweek/~3/5VmZPNmyI-4/firms-spend-big-money-flaws-they-could-fix-development