As a QSA there were a bunch of things Dean was forbidden from discussing. As an ex QSA some of these matters will remain firmly sequestered inside his kimono - but others things, more general things, can now be shared. Dean has 30 minutes worth of handy tips, hints, lessons and some brickbats relating to PCI and secure system development that he can now share with the community.