The questions raised cry for a poll:

When you first heard about Heartbleed, did you fail to react? (Normalcy bias)

When you first learned about the risk, what probability did you assign to being affected by it? (enter 0.0 if not affected)

What probability do you assign now? (Optimism bias) (enter 0.0 if not affected)

Were you surprised to find out that someone in your life did not know about Heartbleed, and regret not telling them when it had occurred to you to tell them? (Bystander effect)

EDIT: The second option should read "I did tell other people delayed" (poll options cannot be altered later)

What did you think it was going to take to address Heartbleed? Did you underestimate what it would take to address it competently? (Dunning-Kruger effect)

After reading news sources on Heartbleed instructions, were you surprised later that some of them were wrong?

How much time did you think it would take to address the issue? Enter the time in days, enter 0.0 to see results.

Did it take longer? (Planning fallacy) Enter the ''factor'' it took longer than expected (e.g. if it took double as long enter 2.0; to see results enter 1.0).

Did you ignore Heartbleed? (Ostrich effect)

I would have posted this in Main because it is totally applicable to practical rationality and real risks and it is well written and sourced. That it is somewhat specialized and contains (very good!) technical advice shouldn't matter (this is still much better and more applicable that relaying purely personal experiences which were also OK earlier). But my judgement on this issue cannot be trusted.