A new hope for software security