@pt_ickle@mastodon.social @drwhax@infosec.exchange Yes, but also no. Illogical or "buggy" is a separate problem from security. For example, the OWASP has had "Injection" as a Top 10 vulnerability maybe every publication; we can make systems that are secure by design. Up until two years ago "Overflow" was the top CVE-by-classification vulnerability; we have memory safe languages and can implement safe-by-default string/integer handling. And yet we largely haven't and keep repeating the same mistakes.