Crypto bug of the year: ECDSA signatures broken in Java

And here: https://news.ycombinator.com/item?id=31089216

I believe the tweet author is tptacek on HN, and has a fairly established reputation for talking about crypto / security issues