Mspec:
That is pretty full on stuff and is going to effect a lot of innocent people. Shame on them for doing that it just so wrong on every level.
Who, the criminals for exploiting a bug to commit crimes, or the NSA for discovering it and then sitting on it for years in the arrogant belief that they and they alone would be the only ones who would have it until that belief was shattered when their own security was compromised and - whoops! - it got out into the wild along with an extensive set of example code and documentation?