I like your paranoia. But then again the slippery slope would quickly bring us to distrust non-libre software. And i agree. My "solution" above wanted to deal with the "identity theft by a non-governmental adversary" scenario.

Can't be arsed to check again. They're both equally culpable in my view though.

Implying WPA2-AES is crackable without bruteforcing (either the password or via WPS)? What the hell are you talking about?

Being forced to give a title to my comments is retarded. Thank you slashdot.

That's a perfect way to stop someone from using your email address on your behalf.

I did mr. smartass, turns out the reviewer is the same guy who reviewed the heardbleed 'patch' too.

Oh fuck me remember to disable WPS on your router! And then check it has really been disabled!

If the email account provier in question doesn't offer good security measures abandon it, there's no recourse.

Stop using windows for dealing with ANYsensitive data and THEN reset ALL of your passwords, change the wifi password, use a 30 alphanumeric chars WPA2-AES PSK, wipe clean any mobile device, start using two factor authentication. Use HTTPS everywhere (the browser extension). Treat every electronic device you have at the moment as infected, possibly backdoored.

Who introduced it? What about some background checking on this guy\gal?

Don't wanna sound like a witch hunter here but why don't we start checking who and when introduced critical bugs like these?
Background checks and all...

Oh humans! You mean the weakest link in the security chain?

No sir, perhaps it is bliss but certainly not strength.

awww fuck me and this comment system

$ curl http://job.list/ | egrep -i 'from home | homeworking'