What’s interesting with steam boilers and other types of OSHA related injuries is that it’s not enough that the person who’s doing the stupid thing dies: you have to enforce it even more and even higher. People won’t value their life.

Usually they have a choice between risking their life in a boiler explosion or risking their life in homelessness.

> This "era of constant exploits/patches" is not normal and can't go on. Currently it is an ongoing cat and mouse game, but it doesn't have to be.

Security is always reactive by its very nature. You can do proactive things, but you will always be reactive to novel attacks.

Expect everything to have various levels of rolling upgrades, and soon. That's a lot of work.

We don't do rolling upgrades on steam boilers nor do we do it on our door locks. Nothing is perfect, we just need good enough and we are currently far away from good at all.

When it comes to software it hasn't always been the case. Before the Internet software was considered something stable and even now there are areas, like functional safety critical software, where this is true to some degree.

It's not that it can't be done.

It used to be expensive to a certain extent it will stay expensive, but modern languages, tooling and formal methods will hopefully mitigate that enough.

Most door locks are easy to pick btw. They're not protecting you with technical excellence, they're protecting you by making the thief spend a little time so the neighbours might see him.

> but modern languages, tooling and formal methods will hopefully mitigate that enough.

No, they won't :) This is the world now.

This seems much more fundamental, less social, though.