> And its discovery and resolution highlights one of the advantages of open-source software development.
I wouldn't say that its discovery (two years later) says anything good about open source development.
I wouldn't say that its discovery (two years later) says anything good about open source development.
In the end software is written by people and people make mistakes. I'm pretty sure there are a lot of software be it open or closed source that had absolutely terrible security bugs. Judging open source as a whole by looking at a single project sounds a little bit like overgeneralization. Also, they are obviously in need of help though, I hear a lot of complaints from people about the OpenSSL code.