@0xmf Yeah we took responsibility for that and put it down as a hiring error, the guy should obviously never have been offered the position. Nothing against case (in)sensitivity, but he obviously was inexperienced for the task.
@0xmf I had a new employee complain to me on his first day that the language we were writing in (and that he had been hired to write) had case sensitive variable names, which was "stupid". We chalked it up to a learning experience and re-posted the job ad.
Ars says unlikely the NSA was monitoring the OpenSSL code. Really? You think they wouldn't look for bugs in the most widely used SSL library on the planet? http://arstechnica.com/security/2014/04/nsa-used-heartbleed-nearly-from-the-start-report-claims/