And the catastrophic Specter and Meltdown bugs show that private code doesn’t prevent this sort of thing either...
Caller ID uses a protocol used by dial up modems, which means the telecoms hardware supporting it, is in effect, a dialup modem which makes life easier for security services to remotely access systems once they have updated the firmware on telecoms hardware, for a persistent backdoor.
https://en.wikipedia.org/wiki/Callback_(telecommunications)#...
The whole point is that tons of companies relied on OpenSSL but none of them were stepping up to the plate and funding its maintenance to the point of there being multiple maintainers, so it all fell on that one maintainer's shoulders.
Of course after the shit hit the fan those companies had a change of heart and... forked it. Learning the wrong lessons as usual
I recall reading a couple articles in the past about how NTP was (is?) maintained by one full-time developer who barely broke even on doing it, despite the fact that massive chunks of internet infrastructure rely on it. There's money and personnel out there who could be contributing to infra like OpenSSL and NTP and very often it seems like nobody cares enough to fund it.