I agree - it's completely naive to believe that any software deployed 20 years ago, and open to public attack, with zero maintenance wouldn't be attacked, and c

I agree - it's completely naive to believe that any software deployed 20 years ago, and open to public attack, with zero maintenance wouldn't be attacked, and compromised. I'd like that to be the world we live in - and with the continual evolution in secure programming practices, maybe one day it might be, but it's not. As a profession of software engineers, we have not achieved the level of quality at the costs that is willing to be met to engineer public facing websites that won't be vulnerable to attack at some point in the next 20 years, and will still be running.