[edejong]

Pen-tests show the presence if vulnerabilities, not their absence.

To make secure systems, we need to take the (very) difficult road of working our systems bottom up and proving the absence of vulnerabilities and defining the boundaries of safe operations.