Heartbleed's bounds check was small. Recovery was a four-clock incident

A postmortem-style readout of Heartbleed: the missing heartbeat length check leaked process memory without a log trail, so patching, key replacement, certificate revocation, and session or credential rotation had to be sequenced rather than collapsed into one update.