Quote from: trilli0n on February 22, 2014, 01:21:49 PM

Quote from: cityglut on February 22, 2014, 01:15:58 PM

It isn't a matter of being unwilling. Although we are more familiar with the protocol, among only the three of us, we simply lack the man-power to do everything at once. It would not be possible to maintain the speed at which we are moving and also do a thorough bug check.

Moreover, it is not only the *amount* of time spent looking at the code, but the number of people who are looking at it. Even if one of us had the time to devote himself exclusively to reviewing the protocol, this wouldn't make extra eyes unnecessary.

Too bad then that making the protocol robust and secure is a second priority for the core devs.

You are putting words in my mouth. It is not a second priority. As I said, it is not only the amount time spent looking at the protocol, but rather the number of people who look at it, as well, that matters.

We can and have looked at it, but more eyes is always better.

If it were a "second priority" we wouldn't be looking to pay people out of our own pockets to help us looks for security holes.

EDIT: I misspoke in my earlier post: it is not that we can't do a "thorough bug check". We have done thorough bug-checks and will continue to do so. However, security is its own job that needs to be attended to constantly and by as many people as possible.