Developers, Alex Payne sat down and discussed security recently. There's been a lot of discussion here on the subject recently so I'm passing along the link:
http://citizengarden.com/2009/01/08/episode-10-phish-my-phail-whale/ Well worth the listen. @dougw