I think the spyware has been a radioactive enough issue that any derivatives are going to make a point of cutting it out.

That said, I don't see the need. As much as I don't like what Ubuntu did with the shopping lens, I've long switched to Xubuntu anyway, which is more sanely managed. (The original reason was to get away from Unity, and their avoidance of subsequent Canonical brain damage cemented the deal.)

Significantly, when you use [KX]ubuntu, you still benefit from all the release engineering work of Ubuntu proper, including security updates---a point on which I'm a little more wary of derivatives like Mint.

You'd probably have an easier time explaining it as whitelisting versus blacklisting. A developer can't hope to ever enumerate all the bad things an app should reject, so s/he should instead enumerate the much smaller set of things it should accept. Same deal if you're using a regex or whatnot to sanitize input instead of matching against a list.

The bad guys don't have to hack SSL. They only have to hack a certificate authority.

(IIRC, this is how the Chinese government broke into the Gmail accounts of various dissidents/activists.)

Fixed that for you.

The cheap herpes test works that quickly, too? My understanding is that HSV is harder to detect, not least because the virus isn't always being shed.

If the test is reliable, and quick to yield a positive, that would be pretty good---given that condoms don't necessarily protect against HSV, and we don't have a cure for it as yet...

What I'd like to know is, does this test have the problem of most STD tests where you have to wait ~6 months after infection to get a positive result, since it only detects STD-antibodies (and not the STD itself) and it takes about that long for them to build up sufficiently high?

Is this what you're looking for?

Since you've got real stratum-1 NTP servers, you could skip the pool altogether and add them to the official NTP time server list.

AFAIU, the NTP pool is meant more for lower-stratum servers, like users on static-IP cable modems, so your machines wouldn't be doing as much good there.

PGP/GPG is overkill. Just drop messages that fail an SPF check. Spoofing is part of the problem here, and SPF was tailor-made to address spoofing.

If you do use PGP/GPG, you don't need an extra header for the signature; it's usually added as a small attachment, and better mail clients already pick up on that for verification.

"Sir, there are some gentlemen here who say they are from an organization called the BSA. They want to see the license certificates for those Windows CDs we've been handing out..."

• Server-side Sieve filtering/sorting
• File storage, optionally Web-accessible (I use this to serve up a simple, static-only Web site)
• Various authentication options (reduced-access password, one-time logins, passwords via SMS, etc.)
• Teh Google is not reading your mail, so you can put your tin-foil hat away :-)

Yeah, I thought so too---quite a slip for the Onion's usual pitch-perfect satire.

They should have gone with something like, "One day, I found her staring at herself in the mirror, wearing her older brother's football helmet..."