Over the years, I have been visiting attended quite some a number of security conferences and got more and more frustrated. Bashing developers, blaming them for writing insecure software, not going to security conferences. It is easy to blame, but what’s the point? During this talk I will show why the security community has failed to connect to the developers and, more importantly, how to do it right!