The Exploitation of OpenSSL

The Web has been abuzz with discussion of the HeartBleed flaw. Security vendors and experts have been falling all over themselves to offer advice on detecting or mitigating the flaw; consultants have been offering businesses advice on how to deal with the problem; businesses with websites have been fretting about how to respond; the NSA has been accused of having known about -- and exploited -- the vulnerability; and the Obama administration has said that the NSA should disclose vulnerabilities like this unless they impinge upon national security.