I'm pretty sure there's a scarier part where there are still InfoSec pros out there who haven't bothered patching their OpenSSL implementation, months after Heartbleed went public.