Getting product security engineering right | Hacker News Reader