For many years, I have said that complexity is the worst enemy of security. At CyCon earlier this month, Thomas Dullien gave an excellent talk on the subject with far more detail than I’ve ever provided. Video. Slides….

https://www.schneier.com/blog/archives/2018/06/thomas_dullien_.html