Though I really appreciate the shut up and hack mentality, sometimes people have to pick their battles. It might still be appropriate to send a message to the community to draw attention to the issue, in the hope that somebody else has the time to do the hard work. In this case it seems like OpenBSD might be doing that work.

The bug estimates phk gives might not be hard science, but having spent the past few days looking at the OpenSSL code, I think his critique is spot on.