[jackpirate]

Security researchers should be much more skeptical of claims that a system is safe than they should about claims that a system is unsafe. The default posture of accepting that all reputable claims about a system being unsafe are true is probably not too bad of a one to have.