dont know if anybody saw this coming, i certainly didn't.
i was thinking, which was more serious; heartbleed or goto-fail. on reflection, the heartbleed is CONSIDERABLY worse.
for those who dont know: goto-fail (the apple ssl bug) meant that basically any ssl cert would pass, so it would be relatively easy to dupe a site and collect information. fairly targeted and specific to apple devices.
heartbleed though, would allow an attacker to breach server security and obtain all of the information in memory on the server. get that information, and you can get anything; personal details, files, access logs, anything essentially.