OpenSSL after Heartbleed

It was never a pleasant experience to talk with LF/CII. I was trying to ask CII about how to become a member of CII. I sent the requests at twice via their website's form but didn't got any feedback. Then I went to talk to one of CII guy at Linuxcon. I think he didn't expected I was showing up in Toronto. Then he said CII is making new membership plan and he worries about a small company like us might not afford the membership cost, that's why he didn't reply and he said he will send membership documents to me. I waited for few days and then emailed him last month and haven't get any feedback yet;-) I totally understandy I'm not their *customers*, so they don't have to give a shit about my opinion/request.

To be honest, there are quite few awesome projects funded by CII, Reproducible builds( we did a reproducible builds for PaX/Grsecurity https://github.com/hardenedlinux/grsecurity-reproducible-...) and KSPP are my favorite ones. KSPP matters because PaX/Grsecurity is there already for years. I'm a supporter of PaX/Grsecurity and their philosophical ideas about mitigation. KSPP has been trying to port( and in their own implementation) some features of PaX/Grsecurity to vanilla kernel. I was supposed to make a donation to CII/KSPP and convince more .cn big corps to become a CII member. Well now, hehe;-)