James Iry explains how to estimate software:
I haven’t looked at the problem.
Completed: 0%
Time estimate: about 2 weeks.I’ve looked at the problem.
Completed: 50%
Time estimate: about 2 more weeks.I’ve implemented almost everything. All that remains is the difficult stuff that I don’t really know how to do.
Completed: 90%
Time estimate: about 2 more weeks.I’ve done everything. All that remains is documentation, code review, tests and error handling.
Completed: 99%
Time estimate: about 2 more weeks.I still haven’t finished documentation, code review, tests, or error handling. The truth is I’ve been gold plating what I already wrote. But I just saw another problem that seems more interesting.
Completed: 100%
Time estimate: 0 more weeks.
And that explains the state of software security…