> A professional developer does thorough work when it matters, and cuts irrelevant corners that aren’t worth wasting time on. The problem, it seems to me, is t

> A professional developer does thorough work when it matters, and cuts irrelevant corners that aren’t worth wasting time on. The problem, it seems to me, is that, while a furniture maker may have a reasonably stable idea of what their furniture will be used for, I think the makers of truly useful software can have no reasonable idea of the uses to which their software will eventually be put, and so must design so that the program can accommodate the demands put on it, no matter how unexpected or bizarre. How many modern security issues (I ask rhetorically) stem from design decisions rooted, explicitly or implicitly, in the assumption that the software would never be exposed to hostile actors?