OpenSSL: we are really poor. We have no money to block vulnerabilities.

Countless companies around the world rely on the open-source encryption library OpenSSL, among which there are tech giants such as Cisco and Yahoo. However, for such an important project, it receives a small amount of donations each year. Even a common American programmer cannot afford to pay a salary.

OpenSSL TLS heartbeat read remote information leakage (CVE-2014-0160)

Severe OpenSSL bug allows attackers to read 64 KB of memory, fixed in half an hour in Debian

OpenSSL "heartbleed" Security Vulnerability

Provides FTP + SSL/TLS authentication through OpenSSL and implements secure data transmission.

According to Steve Marquess, Chairman and Co-founder of the OpenSSL Software Foundation, the OpenSSL Project usually receives only $2000 in a year. The Heartbleed high-risk vulnerability exposed this week increased the exposure of OpenSSL. The Foundation received about 200 donations, totaling about $3000, ranging from $0.02 to $300. Some of them made multiple donations. He said that all donations will be made directly to the OpenSSL Project Team.

OpenSSL details: click here
OpenSSL: click here