It is a logical progression of sorts. A really well implemented operating system should make support issues much less rampant, as well as making security issues much less problematic.

A security hole is taking advantage of a bug — if bugs can’t have unexpected consequences (like handing something root access, or creating an opprotunity to tell a lie), then the system is fundamentally more secure.

One gentleman with an extraordinary insight into security issues is Mark M. Miller, currently of Google. I have learned more from him than anybody else. One of his sayings that I cherish is:
“Never prohibit what you can’t prevent”. MarkM was and is a real fan of the “capability security model”, which I strongly recommend you learn about (if you don’t already know about it).

My other guru-level saint in this field is Bruce Schneier , who has a different take than MarkM does - which is to make sure you focus on the real threats rather than the theoretical ones, and that you don’t panic.

So will you be shifting more into forensics now?

– Jamie F.

Don’t you let people change you!

Cheers!