Workshop (90 minutes) Do a small talk on Debian security status (based on data from the paper) - 20' Discuss? Do a small talk on common security bugs (both C applications and web apps) Do practical and real examples (from previous DSAs): * show insecure code * show how you could have found the bug * show how its fixed by the DSA End of the talk: recruiting