Lua is not an acronym. From the Lua web page:
"Lua" (pronounced LOO-ah) means "Moon" in Portuguese. As such, it is neither an acronym nor an abbreviation, but a noun.
LuaJIT is probably the fastest scripting language in existence. I have found for math-heavy algorithms it's as fast as optimized compiled C code. Plus it's FFI interface is stunningly fast, allowing easy fast access to native libraries.
I boot off a DVD/USB to a minimal Linux system then write over the whole drive with cryptographically secure random data. That is a bit overkill but I work in security/cryptography and often have or had extremely sensitive data on my machine. "dd if=/dev/zero" works faster and is plenty good for normal people. This "nukes" the whole drive to a blank slate.
From there I'm usually able to install whatever OS they are using and set the machine up fresh. If the company has draconian IT policies and I can't install the OS then I let them re-image the drive. I only do this after I completely wipe the drive myself though. A re-image on top of your existing system most likely will not wipe all your old data.
People can tag anyone on Facebook. A random person could take a picture of you and tag you in it without you even having a Facebook account.
Hmmm, I just now noticed that my Ubuntu and Debian systems did not insert the leap second. That's probably why they didn't have problems.
Not sure why they didn't insert it, they're all running ntpd. Now their time is off by one second.
My up-to-date Arch workstation went haywire (kernel 3.4.4). mysqld, firefox, and ksoftirq were using a massive amount of CPU. Stopping the processes made the CPU usage go away but as soon as I restarted them they would go nuts again. I had to reboot the machine.
I have an Ubuntu 12.04 server and Debian stable server that apparently were not affected. My Linux based routers also seemed unaffected although they don't run ntp as a daemon which probably makes a difference.
Almost all VPN services are fly-by-night ops. Just don't do it. Seriously, they come and go like the wind. I'm sure there are legit and have been around for a long time but it's nigh impossible to vet any of these companies.
Instead find a good hosting providing and rent yourself a server with the amount of bandwidth you need and the location in the US you want (most providers have data centers in various places). For more security I would get a whole machine, not a VPS. Run OpenVPN or whatever on it and you're good to go. It wouldn't need much disk or RAM.
I've noticed several design suggestions in your code.