> “If we want a secure system that’s resilient against attack then it must be openly attacked, otherwise nothing will be done.” this is a brilliant bit of know

> “If we want a secure system that’s resilient against attack then it must be openly attacked, otherwise nothing will be done.” this is a brilliant bit of knowledge that I had somehow slightly understood and had never seen verbalized anywhere previously. as a bonus, it is perfectly worded. he is exactly right; to use an analogy: an immune system that is never attacked cannot defend against any attack, because only attacks can teach the immune system how to defend. it's the same (mostly) for computer security concerns.