Why the “Secure by Design” pledge won’t save us from AppSec failures

A pledge is not a practice. What signing up to secure-by-design actually costs, and why most of the organisations that signed will not pay it.

Where it was given