Quoll - Usually I will put my name on mailing lists of software companies I trust - esp. 3D Art proggies. This gets me info on updates and patches. But like someone said earlier - no privacy policy, no info. Also, as a crusty old sysadmin, I'm registered with Red Hat (Linux), IBM (AIX), and the KDE mailing lists... I was even on M$' TechNet for awhile. With operating systems, you cannot get info on security patches fast enough :) But then again, all this goes to my work e-mail addy, where a slew of spam-blockers and internal filters chuck the spammers into /dev/null, where they belong, and on an OC-48, time isn't a problem. /P