Debian's OpenSSL fiasco. For the record, I use, like and support Debian, OSS and free software but we must not spread myths