"isn't the case for most proprietary software - even for the most security-concerned closed-source companies" Frequently, and it is an attitude I really dislik

"isn't the case for most proprietary software - even for the most security-concerned closed-source companies" Frequently, and it is an attitude I really dislike. A serious dedicated attacker can replicate the reversing work quite fast, but this kind of things make it really hard to dedicate a couple of hors to assessing the quality of a protocol. Moreover, they demonstrated not to be security-concerned, so this comes to me as covering tracks, even if it isn't.