> It's already been discussed in this thread how old OpenSSL is... That's completely irrelevant to the point I am making. I'm using it as a counterexample to y

> It's already been discussed in this thread how old OpenSSL is... That's completely irrelevant to the point I am making. I'm using it as a counterexample to your reasoning that if code for (your) critical infrastructure was published, any obvious flaws in it would almost immediately be discovered and exploited. That's completely orthogonal to how old or poorly written the codebase is. > Ok. I'll tell my customer we don't need all the firewalls, IDS, code inspection, risk assessment and hardening because zeroname on HN told me it was OK. Well, I didn't. You're clearly not only unwilling to engage in logical reasoning, you also seem to lack basic reading comprehension. > I'm not at all offended by your ridiculous insults... I don't mean it as an insult, but I'm really losing my patience here. Your ego is so tied to being right that you can't admit to having made a little logical blunder there. Logical fallacies are actually really common, there's no shame in them. In fact, I'm prone to arguing the same If-this-then-that fallacies myself. Either way, if you really care to be right, it doesn't matter what your job is or who gave it to you and how smart and diligent your team is. You just have to get your propositional logic correct. Simple example: False: If I leave the door unlocked, people will come and steal my stuff. (Non Sequitur) True: If I leave the door unlocked, a thief will have it much easier to come in and steal my stuff.