Our instinct is to fix bugs when we come across them, but sometimes that can cause more harm than good.

Henry Petroski put it best when he said we should beware the lure of success and listen to the lessons of failure. In software security, perhaps we should ignore them both sometimes.

With an example about OpenSSL.