2026.08.07 07:49:29 (Mastodon 117053126704452265, Twitter 2085634428622287221) from Daniel J. Bernstein:
I think that for secure software it's more useful than ever to measure, minimize, and verify the TCB. State a security goal (e.g. "my screen will show 'From: Alice' only for messages from Alice"); restructure software with a tiny nucleus enforcing this goal against all other LOC.