The talk linked from this post was pretty easy to digest, perhaps you should watch the whole thing before asking what it's about?

The television-standards bit, while probably longer than necessary, was meant to drive home the point that the responsibility for improving application security on the Internet should not be placed with the user.