• 0 Posts
  • 151 Comments
Joined 3 years ago
cake
Cake day: June 18th, 2023

help-circle



  • For critical systems, reliability, predictability, consistency, and long-term performance data are more important than modernization. It makes perfect sense that a system like this would lag the leading edge of technology significantly. It is ok if the technology has problems, even if it has high failure rates, as long as the failure rates are predictable - then you can write procedures around them. Floppy disks don’t exactly offer bulletproof reliability, but they are well understood - and also you can generally just toss them on a desk or in a drawer without worrying too much about incidental damage.

    You want this kind of technology to be so simple and dependable that you don’t have to think about it, it just works as expected. It also massively simplifies staff training and procedure documentation if the relevant bits of technology don’t change very often - until of course those bits become so outdated that the procedures for getting them to interface with newer systems becomes its own mess.

    If it ain’t broke, don’t fix it.





  • I am not vegan, but I’m open minded and in favor of reduced consumption. I’ve tried several meat substitutes and enjoyed some. I keep a package of Beyond Beef burger patties in my freezer and eat them regularly. I’m looking forward to trying the lab-grown salmon when it reaches my area. I eat meat-free meals at least three times per week (I know that’s not a lot, but my background is meat with every meal, so… one step at a time).

    I’m saying all of this because I feel the need to preemptively defend the following:

    Every version of vegan “cheese” I’ve ever tried was bloody awful and in no way an acceptable substitute for actual cheese. The best you could say about it was that it was vaguely the consistency and similar in mass to an equivalent amount of cheese. The flavor, smell, texture, and behavior (e.g. capacity to melt or be thinly sliced, shredded or grated) were all wrong. I have a distinct memory of eating a bagel with vegan cream cheese, which both tasted and felt like glue paste. It had as much in common with actual cream cheese as did the paper the bagel was wrapped in.





  • I’m looking for advice to maximize security.

    The most important answers to this all live outside your server. What is your home network like? Do you control the gateway? Do you have a dedicated firewall? Do you have devices segregated into VLANs so they can’t observe each other (especially IoT devices)? Do you have SNMP disabled?

    1. Containers are not a security barrier. They cannot be, they never will be.
    2. If you are defending against intrusion at your local file server, it is already too late. The call is coming from inside the house.

    If you want security, you block all inbound and outbound traffic by default at your network firewall (not the server OS firewall), and then you open only the ports that you actually need, one by one. You set all the closed external ports to do not respond (“stealth” mode), so that anybody trying to reach your network from outside just gets nothing back except on the ports you specifically need to use. You segregate your internal network into logical areas, and you put things that need to talk to each other on their own VLAN, which may or may not have access to the upstream WLAN trunk depending on what they’re doing. You don’t allow crosstalk between VLANs except in very specific cases. You set static IPs and document them, so that you never have to ping or traceroute internally to find something, so you don’t need SNMP. Anybody trying to use SNMP is conducting surveillance on your network and should stick out from other traffic (some “smart”/IoT devices do this automatically - they are bad and should be treated as malicious and should not be allowed to phone home). And then you monitor your traffic at the firewall, and you deal with anything unexpected as it comes up (like once a week review the logs until you have a sense of what normal looks like on different days at various times, then maybe set a few automatic alerts for things that exceed normal-ish boundaries, then go to reviewing like once a month or so - you don’t need to be checking your logs hourly unless you have some reason to be actively paranoid).

    If you handle everything correctly at the router/firewall level, you’re way way beyond the security of most residential and small business networks. You’re not, you know, impenetrable, but you’re at the point where somebody with experience and resources will have to be trying to break into your network specifically on purpose. If you’re that kind of target then nothing short of an actual SOC is going to help you, and running self-managed servers on your home network is a bad idea.



  • Ugh, I thought we were getting over this already.

    The interior is fine, I can appreciate the clean lines and overall minimal ornamentation. White is probably a bad choice for a car that any real human is going to use.

    But a touchscreen for the interior controls? Really? Is it 2015 again? Physical buttons are better. I would even go so far as to say they’re necessary for any controls that a driver might operate while driving - they should be findable by feel only, in the dark, while your eyes are on the road. A luxury vehicle design should certainly have physical controls, even if they’re tucked behind one of these panels to preserve the look of the interior:

    It wouldn’t be ideal, but it would be much better than that thing that looks like a phone bolted onto the center spine, which is just ugly. It sticks out from the rest of the interior design like a flashing neon sign of cost-cutting. It looks like a POS terminal, like I’m about to pay for my coffee:

    What a bad decision, or probably chain of bad decisions made through several committee meetings.





  • the best device for school is a generic laptop that you can easily find guides and replacement parts for. That way you can fix things

    This is the right idea. The qualifier is unnecessary. Repairability is always valuable. The more generic a device is, the more spare parts for it there will be on the market, and the longer those spare parts will be continue to be available on the market.

    Buy common refurb/resale tech. Keep it for years, or decades.