Dinis Cruz

Basically the concept that you replace an existing system with smaller that are originally 100% compatible with the original one

https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work https://help.github.com/articles/signing-commits-using-gpg list instructions on how to do it (not that hard) making SourceTree sign using GPG is not that hard Even if the password is empty (on GPG) signing...

https://twitter.com/thejonmccoy/status/771148484426641412

That is the workflow that development needs

https://twitter.com/DinisCruz/status/771294777505673216

http://blog.diniscruz.com/2012/04/making-security-invisible-by-becoming.html

http://blog.diniscruz.com/2013/06/what-is-privacy-all-about-its-about-not.html

http://blog.diniscruz.com/2012/04/security-evolution-into-engineering.html

on basic static analysis and Tests

http://blog.diniscruz.com/p/real-time-vulnerability-feedback-in.html