Vendors must be starting to "get it!" (or at least feel it!)

I'm not sure about other folks out there, but I lately I've been getting more frequent job inquiries from recruiters in fairly good-sized non-security companies looking for "security researcher" types to help improve their products and product lines. Of course I've "been there, done that" (at Cisco) and the big company life is not at all appealing right now.

But this is one small positive datapoint that perhaps things are starting to improve on the product security front.

Or perhaps things have gotten so bad vendors are desperate to "stop the bleeding."