• 0 Posts
  • 122 Comments
Joined 1 year ago
cake
Cake day: April 13th, 2024

help-circle
  • They are so often stateful and fall over when some scanner comes by, or if a light DNS DoS attack happens, compromising the entire access link, when the scanned systems or the DNS server weren’t even bothered by the amount of requests.

    They introduce weird unexpected restrictions, like preferring to blackhole our customers traffic rather than accepting some asymmetric routing. And then we get blamed for their setup, which they don’t even know.

    They ossify protocol development in general, requiring things like header encryption in QUIC to force them to ignore things that aren’t their business anyway.

    They are apparently also expensive as hell, multiple customers have declined upgrades because they don’t have fast enough firewalls and not enough budget to buy faster ones.

    Those are the ones that come to mind right now. There are also occasional bugs that make our or our customers lives difficult, but I can’t recall a clear one at the moment.














  • I did that once, when the Nexus phones weren’t available in Switzerland but they were in Germany. I ordered it to a location close to the border that specifically offers a postal address as a service and went to pick it up.

    The correct thing to do would have been to go to the border agents, get a confirmation that I’m bringing the merchandise out of the country and pay the Swiss VAT. With the confirmation I could theoretically get the VAT back from the seller I paid it to. Except that was Google and they weren’t intending to sell it for export, so I doubt they would have helped with that.

    What I did was unpack the phone, throw away the packaging, put my old phone in one jeans pocket and my new one in the other, and drive back over the boarder. Having two phones isn’t that weird, so I thought I could get away with claiming them as personal items if I was asked. But I wasn’t even stopped (they only do sampling at the crossing) so it was easy. But it was technically smuggling. Anything over 300 CHF needs to be declared and VAT paid, the phone was around 400 €.

    My mom once went clothes shopping to Austria and didn’t declare them. The border guard asked what she bought. She claimed clothes, but not over the limit. He was like no way, I know that brand, they must be worth more, checked the stuff, and discovered it was worth too much. She had to pay VAT plus a pretty decent fine.

    I only crossed the US Canadian border once in each direction, but to me it seemed like they were way more strict and thorough than here in Europe within Schengen. So I’d be scared I think. But overall I still think your plan could work if you’re careful with it. Maybe gaming laptop would be suspicious if you went for a one day trip, would be better if it was longer. But a phone not really.




  • Here in Switzerland, tax law is different per canton. So for our ~9 million people we have 26 tax laws! We pay taxes on three levels, communal, cantonal and federal taxes. And who collects which part depends on your canton. In mine the commune collects the communal and the cantonal part, and the canton collects the federal part. Yeah… it makes no sense to me either.

    Though regarding the filing that part is not so bad;you only make one tax declaration from which the taxes on all three levels are calculated. And as far as I’m aware each canton offers a free software application for filing. The filings are a little complicated compared to some European neighbours from what I hear. For instance we aren’t source taxed directly out of our pay-checks, so we have to list our earnings and possessions manually and list various deductions.

    Still, from what I gather we have it a little better than the US Americans



  • I wanted a mainstream option but not Ubuntu, and one that was preferably offered with KDE Plasma pre-packaged.

    So I ended up deciding between Debian and Fedora, and what tipped me to Fedora was thinking: Well SELinux sounds neat, quite close to what I learned about Mandatory Access Control in the lectures, and besides, maybe it will be useful in my work knowing one that is close to RHEL.

    Now I work in a network team that has been using Debian for 30 years, lol. Kind of ironic, but I don’t regret it, now I just know both.

    And fighting SELinux was kind of fun too. I modified my local policies so that systemd can run screen because I wanted to create a Minecraft service to which I could connect as admin, even if it was started by systemd.


    1. Ah that makes sense then. I was confused why you would wipe your ESP over and over when it was shared.

    I don’t know why it comes off as hostile, it wasn’t intended that way. Sorry for not expressing it better!

    If the last sentence came across badly, that was more meant to be incredulous that people accept all these workaround instead. There are other comments in here that go to ridiculous lengths to enforce separation, like using the UEFI boot menu to select a disk manually. To me even having two ESPs seems overly cautious, and against the design philosophy. Sharing one ESP is really not an issue (at least as long as you know you’re doing it, as you unfortunately found out the hard way).