<p>The ignite sessions had another problem&#8230; no time to ask questions or throw the occasional 0.02EUR comment at the speakers.</p> <p>For instance, I was going to tell you that the OpenSSL/Debian debacle wasn&#8217;t caused by commenting out the code you refered to (it is still commented out in the latest updates). The problem was caused by the developer going out and trying to find other instances of the same issue and commenting out another piece of code that looked exactly the same (variables and all). But instead of feeding extra entropy into the pool, this second piece of code actually fed <strong>all</strong> the entropy into the pool.</p> <p>That&#8217;s why Marcos Marado said the change had been previously approved by the OpenSSL folks.</p> <p>There are a couple of very good posts about the issue available at planet debian.</p> 129 Carlos Rodrigues http://blog.carlos-rodrigues.com