https://geschonneck.com/2007/08/01/secure-coding/