Some thoughts on security after ten years of Qmail 1.0
I still don&#x27;t get djb&#x27;s distinction between untrusted and minimal privilege code. What he calls &quot;not violating security requirements&quot; is effectively a successful least privilege approach. Very few elements can become hacked without breaking security requirements. If you can&#x27;t gain anything from hacking a piece of software, then why is it even executed? - it obviously didn&#x27;t deal with anything the user wants.<p>In his example, yes, you could change the DNS responses, but you still could not escalate to a higher lever where you can potentially modify stored user data. That is a success in practice.