As many of us know, the best encryption/security is only as good as their dumbest programmer/developer. 

How many more hints does Mr. Garza need in order to finally do something about this continuous pattern of failure?