Software Security: The Trinity of Trouble