Ask HN: What are the fundamental “must read” papers on software security