[identity profile] gareth-rees.livejournal.com 2008-05-14 10:58 am (UTC)(link)
I think comment 87 (by Ken Teague) in this thread (http://www.links.org/?p=327) is a good summary of who's to blame for the debacle.

[identity profile] aardvark179.livejournal.com 2008-05-14 11:39 am (UTC)(link)
Given one of the comments on Ben's post says they get this bug report so often it's in the faq I have to wonder why they haven't fixed it themselves. It's probably not helping with entropy on many OSes, and it's clearly causing problems on their mailing lists and with vendor patches.

Are they just stubbornly waiting for somebody to submit a patch to the right mailing list? Of course now they've revealed openssl-team I fully expect all dev team discussion to move to a new even more secret list.