Gonna paint this on my roof to break some spy satellites
nbailey
joined 2 years ago
The problem in my opinion is the focus on branding Via around "luxury" travel. As nice as the comfy seats are (even for the cheapest econo fare), it really should be more like GO in terms of being cheap, "boring," and fairly reliable. Euro-trains have very basic bus-like interiors, and that's really where we need to be. Make the trains boring, fast, reliable, and cheap.
The funny thing is, high-speed rail actually has a much lower op-ex than our sluggish system. The biggest expense (other than building the system) is the cost of labour for staffing the cabins. The energy costs are pennies per passenger, the trains need very little maintenance (compared to a jet aircraft), the tracks need even less (again, compared to roads, runways, etc), so the real op-ex cost is just having human beings on it. A train that goes twice as fast pays out half as much human-hours per fare, so it starts to make sense why JR's Sinkansen, SNCF's TGV, or Renfe are basically the only forms of transport that are actually cashflow positive once externalities are considered. ("free" access to roads, free pollution, subsidies for air travel, etc)
This was my setup from about four years ago. Other than moving suricata elsewhere, it’s largely the same. Worth a shot if it’s something you’re into!
https://nbailey.ca/post/linux-firewall-ids/
OpenBSD is also great, I’m just more familiar with the Linux tools. All the required tools are in the base image, and they have a great official guide:
Yep. Firewall, routing, dhcp, dns, everything you’d expect from a gateway device. Plain Debian (or really any distro) can do it all. With a 1gbps bi-directional connection fully saturated it will run at about 10% cpu on my very crappy low power Celeron CPU.
Plus, there’s no web UI full of janky and insecure CGI scripts to exploit, and software updates are forever (well, until x64 is deprecated, so basically forever).
IPtables on Debian because I like my life to be boring and unchanging.
For about a year I was running a full out of band IPS on my network. My core switch was set up with port mirroring to spit out a copy of all traffic on one port so that my Suricata server could analyze it. Then, this was fed into ElasticSearch and a bunch of big data crap looked for anomalies.
It was cool. Basically useless because all it did was complain about the same IP crawler bots as my nginx logs. But fun to setup and ultimately good for my career lol.
Yeah, this will actively discourage the most experienced baristas. It takes ~15 seconds to pour some drip coffee out of a carafe, but it takes ~90s for a good quality latte or cappuccino. If your least experienced employee is “6x more productive” then your most senior, that creates a hilariously bad incentive to fire people who know what they’re doing.
Not to mention that this disincentives cleaning.
Great… another nine ton brickmobile to spontaneously catch fire in a tunnel
Not an arch user, but it’s possible they moved dbus to a user scoped unit now. Might be possible to start it like this (or something similar)
systemctl —user start dbus.serviceMaybe these fellas will learn their lessons about risky investments, eh? I can tell you I’ve never had a pipe burst in my GICs and never had asbestos in my RRSP. Landlords are a uniquely whiny and privileged class, overrepresented and vehemently defended at every level of the private and public sectors and media.
It bums me out that the Ontario flag is so bad. It would take like 10 minutes to throw the trillium on the same background as the national flag and have something unique and with less monarchy ick. The current logo is a bit corporate but it would be fine.
https://i.pinimg.com/736x/4c/39/d4/4c39d441f2ff5aec306d9ce7494f2da4--ontario-norman.jpg
They’re not going to jail for you. Never assume a service provider will put themselves at risk on your behalf.