Lets say I want to update my FW because I don't want the NSA to exploit it. How do I know I'm downloading it from Netgear (or any other major home router vendor) rather than a NSA hijacked page? None of them do https.

Open source without collaboration is pointless. A code dump by itself often is not enough encourage collaboration. If there's a lot of bad blood between you and would be contributors then you might as well just keep it to yourself. It really is best not to ignore social component even if the licence doesn't mention it.

deep sense of hurt that a lot of what was in the media was not entirely accurate

Coming from an agency who's entire public record can be summed up by the words "not entirely accurate" ...

...

...

Shit, dog, I got nothin.

Firefox Nightly has also removed the close tab and close window buttons that no one ever bothers with.

Positive: The device won't cut off your hands.
Negative: The device will cut off your head.

Maybe it's not so bad?
Positive: It won't cut off your head.
Negative: It will cut off your hands.

Still no?
Positive: It won't cut off your head, your kids are entertained and happy because...
Negative: For about 20% of uses shocks the shit outta you.

Still not enough? Ok
Positive: This device is great, doesn't chop off your head or hands and it doesn't shock you.
Negative: After about 3 months of heavy usage a small bit of plastic will break rendering the device inoperable. However it's easy to fix and you're a do-it-yourself guy. $1 at a local hardware store and it's good as new and will last you for many years to come.

Perhaps it's best to look at all the facts rather than just the positive ones.

Because only positive facts are relevant?

Why not just help the OpenSSL folks strengthen an already great product

Citation needed.

Yes, yes. Good job Cisco. Great show! Who would have thought a pony could ride a dog like that. Best. show. ever.

Exec Heap - as in you can execute binary code from the heap. Heap memory is normally only allocated for application data rather than executable code.

Stop bothering us with your facts.

There are a number of developers for whom we were unable to determine a corporate affiliation; those are grouped under “unknown” in the table below. With few exceptions, all of the people in this category have contributed ten or fewer changes to the kernel over the past three years, yet the large number of these developers causes their total contribution to be quite high.

The category “none,” instead, represents developers who are known to be doing this work on their own, with no financial contribution happening from any company.

"Unknown" means they don't know if the author's work is sponsored.

Sure they do, if it involves rhythmic clicking and break-dancing.

I grew up on DOS and can probably still fit more TSRs between 0xA0000–0xFFFFF than most. I grew out of it because, despite being very familiar with it, it just wasn't that great. I've been through many transitions over the years and the one to systemd was one of the most enjoyable. I have more control and I don't have to figure it out for every distribution like I do with those god awful shell scripts that need pages of distribution specific "boiler plating" in a vain attempt to make them robust.

I'm running a modern, full featured, OS on my decade old hardware. What's even more remarkable is that I have binaries from 2004 (coming up on a decade) that run just fine too. If I looked around I'm sure I could find older binaries that still work despite being built so long ago. I am considering switching to a lighter weight desktop environment, however. I won't trouble you by using the L word, but it seems to work fine for me without all that loud ticking.

The fact is that as long as they have an effective "tailored access" program they aren't fixing security. If the NSA can exploit a bug so can China. They're full of shit.