Hacker News Reader

Surprised they missed Debian OpenSSL --- a majority of Linux app servers had their SSL security effectively negated, for months.

I suppose that's because it didn't result in a user-visible 404 error screen or similar.