I think it should be mandatory for any software/service that stores user data to have a security bootcamp before deploying their solutions teaching good robust design, how to approach writing secure code and have the necessary checks and balances to avoid vulnerabilities. It'll save them the heartburn and embarrassment to a good extent. Web Security is really under-rated by most developers and with the ease of deployment these days using services like AWS, it is just exacerbated.

I really hope I didn't go off on a slant here but with cases like Diaspora's design flaws, Gawker compromise, and now the Trapster fail, the trend's on the rise.

On that note, any recommendations or pointers on where to start from the security pros on here?! Thanks.