> Just having something like "Have a bonded 3rd party security team review the source code and running router software" would solve around 95% of the stupid thi

> Just having something like "Have a bonded 3rd party security team review the source code and running router software" would solve around 95% of the stupid things they do. It would certainly help, but no economically feasible amount of auditing and best practices could lead to having a warranty on that software. My thesis is that our current understanding of software is fundamentally weaker than that of practical applications of electricity, so it makes no sense to present analogies between the two.