I really don't believe the OpenSSL issue was deliberate. The commit in question was authored by somebody working at a german university and then reviewed by a m

I really don't believe the OpenSSL issue was deliberate. The commit in question was authored by somebody working at a german university and then reviewed by a member of the OpenSSL project. Deliberately setting up something like this up would have been very difficult and besides, these people are likely still around and we can ask them what happened. I really think that this was a) a honest mistake of the author and b) a very good example of why code reviews don't always work, at least for languages like C. http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=4817504d069b4c5082161b02a22116ad75f822b1 http://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=4817... That commit is widely publicised by now and the fact that the article linked here is still speculating about this issue being deliberate puts the whole article in a alarmist light which makes me sceptical about the other claims.