As a fellow reader, I would really be interested in knowing why OpenBSD's team (either Theo de
Raadt or someone else) did not react much (technically speaking I mean). Wouldn't that be a
nice occasion for a "spicy" interview?
Well, I have other less serious conjectures. That security page deserves more animation:
vulnerability, patch, vulnerability, patch, ... It starts to get boring. (I acknowledge the
offending software changes regularly and brings some diversity.) Hey, maybe that's why they
did not react: what about keeping a vulnerability this time? This one would be a nice
candidate IMHO.
In the same vein, maybe they are preparing the honeypot-ready-by-default-killer-feature?