...
Do not hard code sensitive data in programs.
Hard coding sensitive data is considered very bad programming practice because it enforces the requirement of the development environment to be secureSee MSC31-C. Never hard code sensitive information for more information.
Disable memory dumps.
Memory dumps are automatically created when your program crashes. They can contain information stored in any part of program memory. Therefore, memory dumps should be disabled before an application is shipped to users. See MEM06-C. Ensure that sensitive data is not written out to disk for details.
...