Hey, does it means that, in the future, we will have a ring like Saturn?

OK, OK... now tell me if it makes any difference for your browser/app if the certificate is generated by some respected CA or a crappy one. There is no "trust level", just yes or no. Any CA can provide ANY certificate for ANY host. You control one CA, you control them all. If you can make any accepted CA generate the desired certificate, by bypassing identity validation, by political force, by social engineering, by whatever, SSL is just useless. It just protect you from someone a little more "powerful" than yourself. Correct me if I'm wrong but many respected CA can be persuaded by big countries, isn't it? How I love my PGP.

Yes, I think that this is your best solution. Instead of using iptables directly, you should check your distribution software relative option.Generally is is easier (but anyway, it will ultimately result in the same iptables command)

I still remember once when I was programming while listening classical music. I started to type at the same rhythmic of it. As it was a quick one, my production was increased :-) I think it can change the production level for better or worse depending on the music. Prohibiting music is like any other kind of prohibition: It may (or not) work but with the expensive of a decrease of pleasure in working. Generally this would lead to a reduction in the production levels. For me, productively, it does not make sense to prohibit it.. As soon as it does not bother the others, music causes less harm than prohibiting it.

I think this "no one" is Brazil. Starting in Jan/2010, all electric devices will use this new plug.
http://en.wikipedia.org/wiki/IEC_60906-1
http://translate.google.com.br/translate?js=y&prev=_t&hl=pt-BR&ie=UTF-8&u=http%3A%2F%2Fwww.inmetro.gov.br%2Fpluguesetomadas%2Fduvidas.asp&sl=pt&tl=en&history_state0=

"why are the Chinese so interested in the NYPD computer network?" It is not specific to NYPD. They even try to crack my home computer! It's more like a broadcast attack.

Not anymore in OpenAFS 1.3.81.

Copied from release notes:

For UNIX, 1.3.81 is the latest version in the 1.4 release cycle. Starting
in 1.3.70, platforms with pthreads support provide a volserver which like
the fileserver and butc backup system uses pthreads. Solaris versions 8
and above, AIX, IRIX, OpenBSD, Darwin, MacOS and Linux clients support
large (>2gb) files, and provided fileservers have this option enabled.
HP-UX may also support large files, but has not yet been verified. We hope
sites which can do so will make use of 1.3.81 on their UNIX platforms and
provide feedback to help us fix any remaining issues before 1.4 is
released.