Fail-open vs fail-closed: the security decision you make without realizing it

If you build software long enough, you eventually ship a bug that isn't a typo or a logic error — it's a default. Specifically, it's the answer to a question nobody asked out loud: "What happens when ...