Developers don't care about secure code

On Day 1 at Black Hat USA 2010, I sat-in on the Cloud Security Alliance (CSA) Application Security Findings session.  According to the speaker, "Developers don't care… they're  motivated to simply ship code, not secure code."   I've worked with numerous developers on application security assessments, penetration tests, and software design projects.  I've never met a developer who doesn't care about …