>From what I have seen of the CV's of the Java team (at least those who have/had home pages on the various Sun java servers), none of them were particularly security-aware. /r$