Where are developers who know how to develop secure software?

[neumann at csl.sri.com (Peter G. Neumann)]

I'll echo that from David.

Most of you by now must have heard my experience interviewing
a PhD from one of the supposedly TOP U.S. CS departments (albeit
perhaps 12 years ago, before the department made a radical step
forward).

PGN:  What does software engineering mean to you?

ANS:  [after long headscratching pause:]
      Oh, that's putting comments in the code, isn't it?