Please forgive the formal sounding language here. I wrote this back in August 2007, and it must have been for something kind of formal, but I don’t remember what or why. Enjoy.

Purpose-built, Internet-facing servers (e.g., front-end web servers) have no need for n% of the functionality in their OSs and bundled applications. Yet these latter two groups of code are often the basis of the amplification and propagation of exploits.