diff --git a/FAQ b/FAQ
index 9c347ad..bb96565 100644
--- a/FAQ
+++ b/FAQ
@@ -20,3 +20,11 @@ Why our own derivate of the LDMud?
 It should still be possible to run psyced with an off-the-mill ldmud and
 counterwise run a MUD installation with a psyclpc.
 ===============================================================================
+
+Why is ERQ crashing?
+
+- erq doesn't conform to fortify code safety standards. this is ugly and
+  should be fixed but it is okay to just turn off fortify because erq is
+  fed exclusively with sanitized data from psyced, so buffer overruns are
+  possible but only theoretical.
+
diff --git a/TODO b/TODO
index 6fe286b..4f08db9 100644
--- a/TODO
+++ b/TODO
@@ -3,6 +3,10 @@ FROM LDMUD
   that we are active in. syncing with ldmud is a good idea.
 
 BUGS
+- erq doesn't conform to fortify code safety standards. this is ugly and
+  should be fixed but it is okay to just turn off fortify because erq is
+  fed exclusively with sanitized data from psyced, so buffer overruns are
+  possible but only theoretical.
 - configure should warn more vehemently when libidn is missing
 - libpsyc isnt recognized even if properly installed
 - x86_64 seems to require -ldl explicitly at the end of libs