[tsotha]

>But making the leap from that to "my code can't harm people" is a bridge too far.

Meh. My application is an internal app for a large company. It's basically scheduling software for a part of our business process. To even start to hack it you'd first have to break into the corporate network, and in the end you'd have data you didn't care about. Hell, I'm not even sure the people who use it care.

Worst case, a subtle bug (and it would have to be subtle for my users to miss it) might cost my employer a few thousand bucks.

Again, meh. There are a whole lot of internal applications that fall into this category.

[nickcano]

That's not the right way to think about it. Just because you cannot imagine a way your software can be used to attack your company or harm the users, doesn't mean such a thing is impossible or unlikely.