Oh I agree, but when discovered we don't have to wait for a government to do its dirty work before the mere mortals are allowed the patch. Patched, poked in the

Oh I agree, but when discovered we don't have to wait for a government to do its dirty work before the mere mortals are allowed the patch. Patched, poked in the repository and job done. The temporal window of attack is pretty low. Take a look at Microsoft when CVE's are issued versus when the KB article with hotfix is announced and it hits windows update. Not a good story. Regarding the key fiasco, we used puttygen for key generation.