Hacker News Reader

This is a common pattern for bugs and exploits, it seems. X is safe, Y is safe, X+Y is exploitable.

Possibly because the developers of X, Y and Z test their own software for bugs and exploits, but nobody tests the combinations X+Y, X+Z, Y+Z, X+Y+Z.