Larry Seltzer is IMHO one of the few technology journalists who has actually written code - and thus he is more likely to actually understand that which he chooses to write about than the average technology journalist that is trying to cover the exciting world of software security vulnerabilities.  That said - he's taken the time to write a rather interesting and concise piece on some of the things software developers should be taking advantage of if they are writing code for Vista.  It's really well done: http://www.eweek.com/c/a/Security/Security-Bonuses-For-Vista-Programmers/