Project Methods

Continual code audits
started on day one, continual
find a bug, fix. look for it everywhere
paranoia

Many eyes
all changes are verified by someone
justify large changes

Code correctly
"fix bugs, not vulnerabilities"
proactive approach, results