PayPal: Lessons Learned from the Java Deserialization Bug

https://www.paypal-engineering.com/2016/01/21/lessons-learned-from-the-java-deserialization-bug/