"Point to the supplier" is a standard tactic, but also wrong. They did put their customers up to harm, for no other reason then trying to squeeze another buck

"Point to the supplier" is a standard tactic, but also wrong. They did put their customers up to harm, for no other reason then trying to squeeze another buck out of them. They provide no additional benefit to the customer. OpenSSL and Bash are free services providing benefit to their users.