Hyrum's Law: An Observation on Software Engineering
hyrumslaw.com
hyrumslaw.com
For many years, the maintainer of GNU libc refused to accept bug reports for behavior that wasn't documented, and gleefully broke undocumented behaviors that users had been so foolish as to rely on. As people were accustomed to this, it caused little actual difficulty, and gave enormous freedom to make improvements throughout the system, so the library continued to improve.
Some people responded by copying the code they depended on into their own programs. OpenSSL was one such project, and the code they copied in, and the code that depended on incidental details of it, was a very fertile source of gaping security holes.
Would anyone care to paraphrase it?