The presence of a DNSSEC signed DANE/TLSA record for the mail server indicates to other MTA's that the server only does STARTTLS - if STARTTLS is missing from the SMTP dialogue then the other MTA's will refuse to send. Support is available in postfix and exim etc...

Conversations is probably the best client (tho it's only on Android). Both ejabberd and prosody are good servers, prosody is slightly better. Here is a good ejabberd config file that supports all (most?) of what conversations needs: https://gitlab.com/hanno/ejabb... This talk from 33c3 is relevent to this thread: https://www.int21.de/slides/33...

and also is the origin story of hipsters: http://www.electricsheepcomix....

The station is exposed to full daylight and darkness each 45 min orbit. Apparently the thermal cycling caused by each hot/cold change forms microscopic cracks in metals so they are worried about the structure losing strength over time.

If thats nautilus then if you run it before hand with 'nautilus --no-desktop . &' it will behave it's self.

Quite easy, even eaiser these days - all modern dns severs do DNSSEC signing and key re generation for you. You still need to know what to put in the zone files (e.g. which records do what), the O'Reilly book is good, or you can pick it up from wikipedia / the bind admin guide / stack overflow etc..

Quite the opposite. If modern sites had old weak cipher suites enabled then a mitm attack could force your browser to use them (a downgrade attack). Sites that have disabled the old cipher suites are doing the right thing and should be praised for being diligent.

You can use an xmpp client with facebook chat. You can also use an XMPP client with MSN messenger (if you implement microsoft's auth goop). unfortunatly neither facebook or microsoft have enabled federation with there xmpp servers so they are still walled gardens, just walled gardens you can bring your own client to.

https://www.facebook.com/sitetour/chat.php
http://www.macnn.com/articles/11/12/15/ichat.now.able.to.connect.to.all.im.networks/
http://blog.process-one.net/details_on_msns_xmpp_server/

XMPP is the way to go, run your own server with ejabberd, prosody or openfire.

We will, via Kickstarter and it's ilk...

You can store certificate fingerprints in dns, and if the dns zone is signed with dnssec you can use it as a trust authority and avoid the whole root CA crazyness. See: http://tools.ietf.org/html/rfc6698 I suspect google dosn't support it tho :(

No it wouldn't of done - if you hack the registrar you can change the ds records as well as the ns records. dnssec makes no difference in this case. browser side certificate pinning and forcing sites to be https only would help - then the attackers wouldn't be able to set up fake sites. The real sites would still be broken tho!

much clearer picture here: http://www.dailymail.co.uk/news/article-2226203/Skeleton-hero-World-War-II-carrier-pigeon-chimney-secret-coded-message-attached-leg.html

I get:

AOAKN HVPKD FNFJU YIDDC
RQXSR DJHFP EOVFN MIAPX
PABUZ WTYNP CMPNW HJR?H
NLXKE M?M?K ONOIB A???Q
UAOTA RBQRH DJOFM TPZLH
LKXEH REEHT JRZCQ FNKTQ
KLDTS EQIRU AOAKN

The F's are quite square, but the E's are rouned.

note that it starts and ends with AOAKN to tell whoever is decoding it how to generate the key.

SOE used "Poem codes":

http://en.wikipedia.org/wiki/Poem_code

I was at an event in London recently about Iranian Internet censorship run by small media: http://www.wired.co.uk/news/archive/2012-09/27/403-forbidden-iranian-internet http://smallmediafoundation.com/ They said that watching which Iranian blogs get censored was a good way of seeing how power struggles were playing out in the Iranian government, and that at the moment right-wing nationalist blogs that were pro-Ahmadinejad were being censored showing that he was increasingly out of favour with the clerics...