Geer is a pretty salient guy. There are several gems buried deep in the text here:

>> "For me, trust is the availability of effective recourse."

That's a tidy little definition, and quite pithy. And this next one might apply to engineering in general (he brought it up in the context of "fast/good/cheap---pick 2").

>> "I think security engineering are [sic] about tolerable failure modes -- are about what the tolerable levels of failure are."