People think of security as a noun, something you go buy. In reality, it's an abstract concept like happiness. Openness is unbelievably helpful to security.

You know, most people in the open-source world who use open-source software don't actually do builds themselves - those people just download the binaries. And so we expect that the big enterprise people will just do that and we will certainly be providing binaries that have been through full industrial-strength QA, that have been through all the conformance testing.

It makes my head explode when there are people who think you can do everything in HTML.

People think of security as a noun, something you go buy. In reality, it's an abstract concept like happiness. Openness is unbelievably helpful to security.

I think it would be a tragic statement of the universe if Java was the last language that swept through.

The real payoffs you never understand. You should just give good people money and tell them to do good things.

Java is C++ without the guns, clubs and knives.