Firat day of the #heisedevsec was quite good. The presentations which I got to see were well made, entertaining and informative. As an unexpected bonus, there ended up being 2 presentations from Fefe, and both were very much of the "stay away from snakeoil" type and gave good long-term best practices (or what to look out for) towards improving security during software development. Although I don't think a mostly read-only blog is comparable to a typical feature-creeped business app.