Application Security Ramblings