software that doesn't function at all is 100% secure and has other consequences too. Thus, is it more or less important that the software functions or that it

software that doesn't function at all is 100% secure and has other consequences too. Thus, is it more or less important that the software functions or that it is free of all security issues? If there was a condition that your UI became a different shade of grey in your web browser: you wouldnt buy a domain, create a catchy name, generate a logo and scream from the rooftops. He is just saying: there are important security bugs, there are important functional bugs- they are equally important. Insignificant security bugs are not more important than deadlocks; which if you were depending on the kernel for a life critical system could kill you.