Now the question is, was it really a bug, or did NSA or the Chinese put it there?
http://www.freerepublic.com/tag/openssl/index?tab=articles