Debian OpenSSL: Very broken

If you like to transmit secret messages to/from Debian Linux-based hosts (like Ubuntu and friends), you will probably want to pay attention to Ubuntu's bulletin and the corresponding Ubuntu Forum thread.

Dammit all.

This guy spent the morning ranting that "vendors are bad for security." I think it's more appropriate to get specific, though; non-cryptographers are bad for cryptography.