ptacek on how to hide security problems

He says this was written 10 years ago, but it could have been written today. Thomas Ptacek has an excellent (and painful!) essay on how to hide security problems in your products/services.