Inside every large program is a small program struggling to get out.

The unavoidable price of reliability is simplicity.

Here is a language so far ahead of its time, that it was not only an improvement on its predecessors, but also on nearly all its successors.

I was eventually persuaded of the need to design programming notations so as to maximize the number of errors which cannot be made, or if made, can be reliably detected at compile time.

You cannot teach beginners top-down programming, because they don't know which end is up.

The job of formal methods is to elucidate the assumptions upon which formal correctness depends.

Some problems are better evaded than solved.