You're looking in the wrong place.

The public-key algorithms are only used to auth servers/clients and during the negotiation of a session key for a symmetric algorithm. Thanks to the BEAST and CRIME attacks, and the dismal uptake of TLS 1.2, once you rule out the block ciphers in CBC mode the most secure symmetric cipher that clients/servers can be expected to support is RC4, which now accounts for some huge percentage of HTTPS traffic.

Nobody is suggesting that RSA is broken, but there is speculation that the NSA has broken RC4.

You CAN run your own identity-provider, but good luck using it anywhere. OpenID and OAuth are federated standards too, but most "relying parties" only accept a handful of major providers.

I just bought a new Thinkpad. I went with Intel hardware because I know they put effort into Linux driver support. Guess I should have looked a little closer.

I installed Ubuntu 13.04 and immediately ran into an ethernet bug (yes, fix released, but not actually available in the distro yet) and a wireless bug (looks like it might have been fixed, then unfixed, but it's hard to tell. It's broken now, anyway.) ... And that's leaving aside how the touchpad behaves worse under Linux, or how I have to screw around with kernel boot options for decent power management (that will still be worse than Windows.)

The kicker is that these are the same problems I've been having for years, every time I try to run Linux on a laptop, despite the huge advances that have been made. It feels like one step forward, two steps back.

Maybe next year...

Not to mention with access to a privileged account the malware becomes substantially harder to remove.

Research doesn't bear that out. Multitasking reduces efficiency, interrupts and context switches hurt. If, for your specific workload, you find it's a net gain... well, more power to you. It's not one-size fits all.

That's the point. 'My way' allows my coworkers to decide when they can be interrupted. 'Your way' allows people to demand focus.

It probably varies by job and by person. I find it helpful to talk with my coworkers, but a distraction to overhear them.

A mailing list, irc channel, xmpp muc etc. allows me to collaborate on my terms. I can rethink and edit my response, and if I'm in the middle of something I can read it later and respond then. Conversations typically don't work like that.

It doesn't?

Client support is a bit spotty (iOS Mail.app didn't support it, stock Android client doesn't either, alternatives like k9mail do), but that doesn't mean it's not there.

I don't think that's entirely true.

Since... iOS 5, I think it is, Apple maintains a signing window for devices. Assuming you never have any problems with your phone, you can keep using iOS 5 indefinitely. If you ever need to restore the phone though, I believe you will be forced to update to a current version of iOS.

I hadn't thought of that, that seems much more likely.

If the infections are targeted, perhaps the font is dropped to allow found printed documents to be linked to one of the targets?

Not that they're total shit from a security POV? (warning: pdf)

Is it that hard to search?

What are their users? Reprapers? Reprapists?

The irony is that when you get a bit older you'll realize what stupid questions those are.

What kind of piss-poor cpu can't decode mpeg2 in several times realtime?

The article implies h.264 acceleration for levels less-than-or-equal-to 4.1 works fine as well. Scene rules for x264 releases say respect 4.1, and most hardware players top out at that as well... so who's clamoring for it, and why?