This will surprise some of your readers, but my primary interest is not with computer security. I am primarily interested in writing software that works as intended.

My reply is: the software has no known bugs, therefore it has not been updated.

I was going to visit IBM for six months as a visiting scientist. Now, six months is a lot of time, so I came with a whole list of projects that I might want to work on.

Adding functionality is not just a matter of adding code.

In a previous life I wrote the software that controlled my physics experiments. That software had to deal with all kinds of possible failures in equipment. That is probably where I learned to rely on multiple safety nets inside and around my systems.

The Postfix security model is based on keeping software simple and stupid.

Windows favors multi-threading, which means that a service is implemented by one single process.