Security quotes of the week

It is less to do with better or stable and more to do with how much work is generated and for whose benefit that work is done. Here, the benefit of fixing security oversights in one's own code arguably outweighs the cost of tracking the accompanying API changes, and yet the observation is made that people don't bother.

Now consider a less favourable perception of the benefits of something - Python 3 - and it shouldn't be a mystery as to why people aren't tracking that particular, very demanding, programme of change. But maybe it remains a mystery to some people because they perceive Python 3 adoption in general, along with the work it creates, to be more important than the necessary work created when potentially urgent security issues are addressed.