Shit like heartbleed happens because OpenSSL was actively subverting system level libraries like malloc because it was too "slow". What we need are people willi

Shit like heartbleed happens because OpenSSL was actively subverting system level libraries like malloc because it was too "slow". What we need are people willing to do the dirty work and audit libraries for practices that are horrible. Additionally, we need to make -Wall -Werror the default flags for C compilers, to make sure people are writing reasonable code. Furthermore, we need to convince C programmers that things like compile as you type are rather useful, and that they should stop clinging to toolchains that don't support it. In a sane world, the compiler would be a library like everything else, so ambiguous code can be handled much sooner in the process.