including high-profile vendors, as reflected in press reports, vulnerability
databases, and mailing lists. A developer who is actively thinking about security
is likely to monitor these information sources periodically.
2) Documentation. Many white papers, books, articles, or other educational