simplicity and security

[Steve Bellovin <smb @ research . att . com>]

        I conclude that there are two ways of constructing a software
        design:  One way is to make it so simple that there are
        *obviously* no deficiencies and the other way is to make it
        so complicated that there are no *obvious* deficiencies.

                C.A.R. Hoare, Turing Lecture
                ``The Emperor's Old Clothes''
                CACM February 1981, pp. 75-83.

The reason I'm posting this here should be obvious...