Maybe, has Netcraft confirmed it yet?

Disclosing the existence of a vulnerability destroys a lot of its value, too. People who can stop using Tails until the issue is sorted out will do so, shutting off whatever intelligence could be gathered from them. If these guys had a real-world exploitable vulnerability and a willingness to sell it to the NSA, they would have sold it and said nothing.

Only 56.5 acres on land, but 395 million acres downrange.

"normal draw is less than 140 watts, put it in standby and get 15 watts"

That's less than 500, but still an order of magnitude more than a set top box should need! IIRC power supply ratings on Apple TV and Roku box are both under 10 watts, real usage is probably 3-5. Add a WD green or similar hard drive (6-8W) and a couple of tuners and encoding ASICS and it still shouldn't break 20 watts at full load.

One device to compromise. If malware infects the LAN-of-things gateway, it can tell your pillows to play deadmau5, tell the lights to flash, and tell the security system to upload shower-cam photos to facebook.

(But then, computer viruses that just annoy the user with sounds and flashing text are deader than dial-up. Connected home malware would probably wait silently for bad weather, then lock you out and demand 0.25 bitcoin to let you back inside, or steal your amazon credentials when the refrigerator orders more milk, or turn on everyone's air conditioner at the same instant to DDoS the power grid.)

Because I already have one Facebook profile, and it's more than enough. I don't want to have to maintain another one just to keep rating Android apps or commenting on Youtube cat videos.

"Yes, we can trace the changelogs in the software & note who was checking the changes and missed them, but that all can be circumvented."

Actually it can't. That's kind of the point of git.

"The fact is we don't know if Heartbleed was an honest mistake or not...we don't know who knew and when..."

We do know who and what and when, because the person who wrote it and the person who signed off on it have commented publicly about the bug.

Maybe you're thinking of Apple's "goto fail" SSL exploit where we really don't know who or what or when and probably never will because it's not likely Apple is going to release their RCS logs.

Ok, how about Draw Something?

Zynga paid $180 million for Draw Something's 10 million users, tried to monetize the userbase by adding the sort of pay-to-win "features" that ruined Words With Friends, and they all left.

Facebook says they don't, law suits against Facebook Ireland say they do (and that it's a violation of EU data privacy laws).

Personally, I think it would be too easy for a company that has the data on hand, and no concept of "boundaries" or "no, that's creepy" to resist. They already have millions of users complete address books from the find a friend feature, faces of people they know IRL tagged in photos, locations from check-ins, etc. it's just a matter of writing the right queries to tie them all together into a barebones profile. They either built shadow profiles for non-FB-users until the legal complaints started, or they still do but they keep them in US data centers where "your data is our trade secret" trumps "I never agreed to that!".

Too late, you already have a Facebook account, everyone on the internet does.

You just don't know the password yet.

Obviously.

No, but the IOC should, if they want the games to be a thing Americans still watch in 15-20 years. The FCC already failed when they allowed the anti-competitive Comcast/NBC merger in the first place.