[lifeisstillgood]

The comments about Heartbleed and OpenSSL suggest (to me) his behind the scenes thinking:

Airplanes don't fall out of the sky because transport safety boards do the analysis and the manufacturers follow their advice - the idea is only one planet crashes per type of mistake.

Well it's hard to get a group of open source developers to follow cleanroom techniques for free. I am guessing that the thinking is to fund the identified OSS groups.

Which is nice...

[_carbyau_]

You don't have to fund every OSS group. But maybe someone should think about funding the right ones.

Obligatory XKCD: https://xkcd.com/2347/

The only issue is who funds them all? UK? US? China? UN? Some body similar to WHO but for cyber?