The conclusion i have come to after reading about Heartbleed is, that OpenSSL's code is a giant monolithic mess and does everything on its own from the ground u

The conclusion i have come to after reading about Heartbleed is, that OpenSSL's code is a giant monolithic mess and does everything on its own from the ground up in a highly optimized way for each and every platform, thus breaking the simple rule "do not trust the client, ever" could stay undetected. Adding a Bitcoin miner to the mix would worsen the problems. I think OpenSSL needs professional structure - organization and code-wise to gain funds and harden the system. This was discussed in other threads on HN already, i am of the opinion that they could pull this of, if they wanted to invest time into it. For consumers i could imagine a system library or framework, which applications could depend upon. This way the mining would be encapsulated. The user could get some control options and some information dashboards. The apps would then talk to the miner and ask for a share.