[quotedmycode]

Yeah, I like to extend this out and make it generic like this:

If you don't test it, how do you know?

For example, one person told me he can't understand antivirus software and why people buy it, because he never got a virus. I asked him "how do you know you didn't get a virus?". He just looked at me, not saying a word. I hope my point got across though. If you aren't checking, you don't know. Same could be said about hacking these days. You secure your system, that's good, but if you don't have something to detect hackers, you are the same as the guy without antivirus and the guy without tested backups. You just have no idea whether or not you are protected.

[FeepingCreature]

Though to be fair, the people telling me that I might have a virus are the people who want me to give them money.

"How do you know you didn't get a virus?"

I don't. But it's not epistemically clean to let other people set your priors for things like risk, if they have a financial interest in making you worry.

[digi_owl]

Thats pretty much a variation on the Lucas Critique.

https://en.wikipedia.org/wiki/Lucas_critique

And sadly one reason why IT is a easy department for the beancounters to downsize.