Actually, per the actual OpenSSL maintainers, there are precious few eyes on the OpenSSL code. http://www.theguardian.com/technology/2014/apr/11/heartbleed-dev

Actually, per the actual OpenSSL maintainers, there are precious few eyes on the OpenSSL code. http://www.theguardian.com/technology/2014/apr/11/heartbleed-developer-error-regrets-oversight http://www.theguardian.com/technology/2014/apr/11/heartbleed... From Robin Segglelman, the maintainer who "accidentally" added the heartbleed bug: """ ... OpenSSL is definitely under-resourced for its wide distribution. It has millions of users but only very few actually contribute to the project." """ I really think you should try joining and open source community and contributing some code. Then I suspect you'll understand that it is just as hard as any proprietary code (like that which I work on for $day_job). The difference is that Open Source code, even critical stuff that runs the internet, is often woefully understaffed and over expected to be perfect.