Re: Why Companies are Poor at Finding Bugs