"Proofs of programs are too boring for the social process of mathematics to work."

- Richard Demillo, Richard Lipton, and Alan Perlis, 1979

"... So don't rely on social processes for verification"

- David Dill, 1999