You heard it here first?

[rhu]

How sad is it that I learned of the Debian weak-SSH-key vulnerability from xkcd and not from Bruce Schneier or SANS (to be fair, the SANS email was waiting in my inbox this morning, but I read xkcd first.)

And how long is it before CBS buys xkcd? :-)