Shellshock is one of the oldest known bugs in history. But its story is not that usual. Early this year, security researchers discovered another bug, called Heartbleed, that has languished in open source software for years. Both bugs are indicative a problem that could continue to plague the internet unless we change the way we write and audit software. The truth is that the net is littered with code that dates back decades, and some of it never gets looked at.