Ouch:
Open Source sucks.
Quote
The vulnerability will not be fixed. The indirect costs of switching to HTTPS (like lost advertisement revenue) make it a inviable solution.
Open Source sucks.




