> I also object to the presupposition that there is secure software and non-secure software. I'm with you 100% here. Especially without a more precise definit

> I also object to the presupposition that there is secure software and non-secure software. I'm with you 100% here. Especially without a more precise definition of what we mean by "secure". > In most practical cases, it is impossibly hard to tell in which class an application falls, so it would be better not to make that distinction at all. Unfortunately, it seems that it's really quite easy to tell. Unless you have overwhelming evidence [1] that says the software is "secure", it's almost certainly going to turn out to be insecure. [1] For example: seL4 and its proofs of correctness http://sel4.systems/ http://sel4.systems/