What's more frustrating is that after the disclosure of Heartbleed, a lot of commentators have been talking about how it demonstrates a colossal blow on free so

What's more frustrating is that after the disclosure of Heartbleed, a lot of commentators have been talking about how it demonstrates a colossal blow on free software in general, and that it is now horribly insecure. Of course, anyone who is subscribed to a relevant mailing list knows that security bugs are discovered constantly, are promptly addressed and most never see much grace beyond being buried in the archives of some taxonomy. All these marketing campaigns that are about making infomercials out of security vulnerabilities backfire by causing panic, exacerbating ignorance and creating talking points for uninformed pundits ("But Heartbleed this, Shellshock that..."), and I'd wager they skew the infosec community even further towards self-promotion and ephemerality.