What I find kind of funny is >Writing complex software without bugs is impossible. I agree it's almost impossible to acheive bug free code (let alone unexploi

What I find kind of funny is >Writing complex software without bugs is impossible. I agree it's almost impossible to acheive bug free code (let alone unexploitable code that an adversary can experiment with) but look at crypto. Now go look at any industry where safety is important. Automative. Aviation. Look at the procedures in place for putting software in an ASIL-D application or take a look at the mind-numbing procedures specified in DO-254. It's not like these guys are actually making any attempt to actually write bug-free applications.