You have an impressive reputation, but, still, you fail to grasp a simple point of logic. You said shipping perfect software is impossible. To disprove you, all I have to do Is to show a single example of a perfect program. Many simple programs you use every day of your life certainly fall into this category. Maybe we got overly ambitious with our building blocks. Maybe we made it a job harder than it could be. You say you always find something. Maybe that's because you only look where you know you'll do.<p>I am not against security reviews. Quite the contrary. What I am saying is that you made a very impressive statement you can't possibly prove. There is software that does exactly what it's intended to do with no side effects, no bugs and that lives in a spacesecurity flaws are non-existant.<p>You fail to understand not all software is as complex as, say, a JVM. I am pretty sure you would haves hard time finding a flaw in, just to make a very simple example, the code that runs my coffee machine or that calculates my car's mileage. A security expert that claims it's impossible to write perfect software is nothing but arrogant and self-serving.<p>So, if you want to say it's impossible to have perfect software, please, prove it.