Ouch
From an inteview with Theo de Raadt, the creator of OpenBSD:
Theo de Raadt:
. . .
Of course we did not set out to create OpenSSH for the money — we purposely made it completely free so that the "telnet infrastructure" of the 1980s would die. But it sure is sad that none of these companies return even a fraction of value in kind.
If you want to judge any entity particularly harshly, judge Sun. Yearly they hold interoperability events, for NFS and other protocols, and they include SSH implementation tests as well. Twice we asked them to cover the travel and accommodation costs for a developer to come to their event, and they refused. Considering that their SunSSH is directly based on our code, that is just flat out insulting. Shame on you Sun, shame, shame, shame.
I will say it here — if an OpenSSH hole is found that applies to SunSSH, Sun will not be informed. Or maybe that has happened already.