2 things: 1) 11 years. The code in question was 11 years old. Another example not to rely on "given enough eyeballs, all bugs are shallow". 11 freakin years

2 things: 1) 11 years. The code in question was 11 years old. Another example not to rely on "given enough eyeballs, all bugs are shallow". 11 freakin years. 2) Security off by default is yet another example indicating how security receives lower priority - in a library whose main aim is to secure data transport no less! It all adds up to security debt - at some point it will be paid.