My solution is to not even expose SSH to the public internet. Instead I run OpenVPN on the server, and only expose SSH access to hosts who have joined the virtual network (which itself requires a client certificate). Even then, SSH access is pubkey/Kerberos only.

Now I get zero ssh gropes, and nobody even tries to get into the VPN. The OpenVPN port doesn't even show up in an out-of-the-box nmap -v -A scan.

Of course, decentralization has its own drawbacks. Remember when SMTP servers would happily forward mail on behalf of any connecting client?

But fortunately all the hardware and software patents involved make this impossible!

Just have one of them sign your cert. All they ask is evidence that you own the relevant domain name. I've had good success with StartCom. Their public cert is trusted by most OSes and browsers. If anything, Google's action may be a boon to such CAs.

I recently had to select a forums solution for my company, and this site proved extremely useful: http://www.forummatrix.org/

It catalogues tons of closed and open-source forum products coded by dozens of variables, and lets you compare them in a big matrix. Very useful if you have constraints/preferences like "works with SQL server" or "isn't PHP", etc.

My main complaint about it is that some of the data are out-of-date, but it is still a great starting point.

Sounds kinda optimistic to me.

... it may never be decoded :(

I fully agree, and furthermore... The thing that pisses me off the most about most (even supposedly reputable) programs these days, is the eye opener you get if you run ldd. The fact that the binaries of supposedly reputable programs are trying to pull in code from like a dozen or more unrelated libraries is just fucking inexcusable, and it seems to get worse every day.

Worse yet is that some of those simply don't work at all unless you resort to "echo -e '/usr/lib\n/usr/local/lib' >> /etc/ld.so.conf", in which case I tend to just bail and never go back. I mean seriously...WTF??? I can't tell you how that burns my ass.

4% of quote traffic is not the same as "4% of trading activity"

Coincidence?

Regarding minors and contracts, wikipedia is your friend. In most states, minors certainly can enter into contracts, but have a special privilege to disaffirm/void the contract at any time, in which case they must disaffirm the entire contract and return any consideration. In the case of an EULA, this is probably not much different from anybody's right to stop using the software if they don't like the EULA. https://secure.wikimedia.org/wikipedia/en/wiki/Capacity_(law)