Poppy

No one owns a single whippet.  A quick search for whippets will reveal owners who collect them like antique silver spoons, or guns, or something.  Those are appropriate similes, given the peculiarities of both the breed and their owners.  So when Tori died, the pack became fractured, and another whippet needed procurement.

Such a task was easier said than done, but Liz can be quite determined.  After contacting the vet/breeder who acquired Tori, and after what I presume was a lengthy negotiation (and a hefty deposit), we had a whippet reserved.

Funny thing about specialty breeds–there’s no way to just get one.  No, there’s paperwork and genealogy tracing and AKC registration and contractual obligations (apparently this whippet’s father is a champion).  There was more paperwork behind getting a whippet than there was for having a kid.  But ultimately, whippet we had.

Naturally, this meant we couldn’t choose our whippet, but that hardly mattered.  Their endearing qualities are ubiquitous, and since she was a puppy, there’s wasn’t much concern for worrisome idiosyncrasies (like violent outbursts).

As a bonus, she took to the kid right away–who named her: Poppy.

Faye, however, is less than tolerant.  I just don’t get it.  She pouted when we got Tori, she pouted when Tori died, and now she’s pouting that we got a new whippet.  I think she just doesn’t like change.

No matter.  Once again we have a whippet pack.

–Simon

The Horse and His Boy

I’ve been dragging my feet with these Narnia books.  Hell, it was back in March when I finished the second one.  The plots kind of force themselves forward, demanding a resolution, but at no point inspiring a lot of empathy for any of the characters.  They also make a lot of painfully bad decisions, but they’re all kids, so I guess that’s the point.  Still, it makes the reading difficult.

But I’m determined to get through these eventually, and I managed to finish The Horse and His Boy.  My initial thoughts were: “Ha.  I get it.  The horse can talk.”  And the story seemed to have used that one twist to drive the plot endlessly.  Fortunately, it eventually delved into more complex scenarios, with more adult themes.  I had to make it about halfway through, but the protagonist got to experience some life-changing events that turned him from an incidental character that forced the story along into a relateable character who inspired my commitment to see the resolution.  The obnoxious horse (and seriously: fuck that horse–I hate it), was revealed to be intentionally irritating, though all worked out in in the end in a way that was satisfying but not overly-convenient for a children’s novel.  There’s even battle, described in a gripping manner, however unconventional.

It took 3 books, but the chronicle is getting darker and more interesting.  Although I don’t really care for that lion.  He seems to be more of an ex machina than Lewis intended.  I get now why people keep trying to force symbolism upon it–it shows up as some sort of Old Testament god, driving events to his will while never really answering any questions, all the while inflicting appropriate punishments at his own discretion.  And while he was critical to the plot of the last book, his presence in this one seems largely unnecessary.  But again, maybe that’s the intent.

If nothing else, this book motivates me to continue with the series.

–Simon

Routing

For the majority of my adult life, I’ve had a preference for D-Link network products.  In the early days, before security was a primary concern, the simple ability of a router to even perform NAT routing reliably was a major accomplishment.  The old Apple Airport base station that dad had purchased was okay, but was notoriously flaky and required software to administer (rather than the universal browser-based GUI).  We had developed a ritualized order in which devices on the network had to be unplugged and rebooted in order to restore connectivity.

Network equipment from 1999–40-bit WEP encryption, awwww yeah!

When I moved into my first college apartment, a friend at the time gave me a D-Link router, the ol’ DIR-524.  It did it’s job admirably, though it became dated and thrown into a box when I moved into my second apartment, replaced by my roommate’s newer model Linksys.

This guy supported 802.11g!

But then the Linksys fried, and I dug out the D-Link again.  I continued to use it in two additional apartments thereafter, until I finally forked over $70 for a newer D-Link (although this was after I tried a Netgear, which continually dropped its routing), the DIR-655.

First gigabit-capable hardware I owned

That first D-Link has long-since disappeared, but the 655 still functions on my network to this day, having been reconfigured to operate as a hotspot (300N is still fast enough for an internet connection).  My point is that, over the years of router experiences, the only ones that seem to have been built with decent hardware and designed with stable firmware were D-Links.  After multiple iterations, I was a brand snob, and currently have 3 of their wireless routers in operation.

But the Internet’s come a long way since the 90s, and while router manufacturers have figured out how to design their equipment to function reliably at a base level, they have not put a premium on security.  I suppose that, given the price points of consumer-grade network equipment, the manufacturers have to prioritize, and that priority has fallen upon aesthetic design and marketing rather than support and security.  They can’t be blamed for that, since they’re only responding to demand (and the controversial “WAF”).  I suppose if customers demanded security, then they would respond accordingly.

My currently-running model: DIR-880L

I’ve listened passively as entire lines of consumer-grade routers were revealed to have massive security holes, and the manufacturers failed to respond.  These compromises always affected other brands, but all good things come to an end, and the flaws were gradually revealed throughout D-Link products too.  Pity.  Now it seems that no brand is immune.  All consumer-grade routers have similar problems, and I found myself left without a viable alternative.  And while I’m probably unlikely to be targeted, I do have Internet-facing services, like this site (rather that hiding in stealth mode).  So, it was time to consider upgrading to a business-class router.

When classifying routers, the target demographic is commonly used in its description.  That carries certain connotations, such as the knowledge and motivation of the purchaser, and the level of features and security.  Consumer-grade routers are designed to be pretty, work out of the box, and be easily configured if the user wants, but configuration isn’t generally required (or terribly robust).  At the other extreme are Enterprise-class routers, which assume a support staff of certified technicians (and an enterprise-level budget, being in the tens of thousands of dollars).  Everywhere in between lie Business-class routers, which I find to have the largest range in price and user-friendliness.

I was primarily after something basic–something that maintained firmware updates with vulnerability discoveries, that had good policy-driven default security settings, and still something that I could figure out given my lack of expertise.  I decided upon a Ubiquiti Edgerouter X.  It operates on their EdgeOS (which is the same across their entire line of products, which means it’s going to get updates as they respond to the needs of their bigger clients), and has received a number of positive recommendations from people in the industry.  And at $50, the price was good and low-risk.

Aesthetics be damned (but I still think it’s a cute little box)

It bears mentioning that this is no all-in-one wireless router–not a problem since I have hotspots configured, but be advised.

Amusingly, I lacked a general computer with an Ethernet port.  I know that seems odd, but computers are increasingly scaled down to reduce form factor and to extend battery life.  And since I haven’t yet built an office, I don’t have a place for a full desktop yet, and therefore stick to laptops.  In short, I needed an adapter.

After some searching, I found an Amazon brand adapter:

The reviews checked out, so I ordered that too.  I did anticipate some problems getting drivers, since the included CD-ROM was useless as I also lacked a CD drive, but they were available online and after a quick install, things were working as advertised.  I needed one of these anyway for other wired LAN configurations, so this project was just the final excuse.

In every consumer-grade router setup I’ve ever experienced, I plug in the router, connect via Ethernet to LAN port 1, navigate to http(s)://192.168.0.1, and am immediately presented with the configuration page login.  I followed these same steps, and…nothing.  Just an unfriendly browser timeout.  I repeated these steps, wondering what I had done wrong.  It was not a good sign that I failed at even finding the configuration page.  This was not going to be easy.

The instructions assumed a certain degree of competence, of which I apparently did not posses.  Fortunately, a kind soul elsewhere on the Internet had written a dummy’s guide for these initial steps (although later, I found these same steps on a quick setup pamphlet in the box, so that was my fault).  I had left my computer’s network settings to pull an IP address via DHCP, as is the norm, but the Edgerouter doesn’t come with DHCP enabled by default.  Instead, I had to manually assign an IP address to my computer within the normal range of the router’s subnet, which was 192.168.1.0/24 (excluding 192.168.1.0 and 192.168.1.1), so I chose 192.168.1.11 (anything in that range would presumably have worked, but I decided to follow the advice explicitly).  192.168.1.1 was therefore the default address for the router (and different than standard consumer grade routers).  I accessed this IP address and was presented with the login.  Success!

Already it looks more professional

The default login credentials were, however, in the manual; so at least I was able to log in right away.

Then, I was presented with the main screen:

The screenshot isn’t mine, but it’s more or less what I saw

Uhhhh, what do I do?  I spent the next half hour clicking everything to figure out where all the settings were.  Router GUIs are always somewhat random, but this one definitely allowed more customization than I was used to.  Fortunately, I found a wizard.  I generally avoid these, but I had two reasons for using them this time: 1) I wanted to keep the existing configurations on my D-Link, and it’s segmented guest WiFi, so that meant either massively overhauling the setup and possibly buying more equipment, or double NAT-ing; and 2) I didn’t fully understand what I was doing and wanted some more hand-holding.  I ran the WAN-LAN setup wizard.

I followed the prompts, the router rebooted, then nothing worked again.  Fortunately, I did know enough to switch the Ethernet cable to from eth0, where I had it and which was now configured to be the WAN port, to eth1.  Then I re-enabled DHCP on my computer.  Success!  I logged in.

I connected the modem to eth0, but the router never pulled an IP address from the ISP.  Frustrated, I repeated the above steps to no avail.  Then I went and fetched the most recent firmware for the device, which was many versions out of date.  Ultimately, this wasn’t the problem, but I’m glad it forced me to go pull the security updates before completing all my configurations.

Turns out I just had to reboot the modem.  I know I know, what a noob mistake.  I put the blame on the new hardware when in fact it’s probably the most advanced piece of network equipment I now owned.  I followed the wizard again, slightly changing the defaults so that eth1 and eth2 were separate subnets–a future experiment in network isolation.  It’s novel, and seemingly obvious now, that each port on a router be configurable.

So, the modem ran into eth0 (now the WAN), eth2 to the WAN on the old router.  Then I had to input all my port-forwarding settings so I could reach the server, and check a setting for NAT reflection, and input my DNS settings, bla bla bla.  In short, everything was back online…except for logging into my email server for some reason.  I’ll have to figure that out later.

[Edit: I figured out that I needed to add a firewall rule on the server to allow logins from the Edgerouter’s IP address]

The important thing is that it works, and my consumer-grade router is no longer the Internet-facing entry point to my LAN.  Presumably, I have a business-class firewall protecting me now.

And an interesting little extra is the DPI feature, screenshot example (again, not my own):

Of course, since I’m double NAT-ing, I don’t see the breakdown per client, but I do see an aggregate of all the network traffic.  I don’t know how robust this is, but it sure looks cool.

Liz might call be paranoid, but it’s only paranoia if aluminum foil wasn’t demonstrably effective at blocking alien mind-reading rays (at least business-class foil anyway).

–Simon

(4) Stalk

Lilly lay in the grass, sighting the tree line. Thermal imaging was of limited effectiveness during the day, but foraging in the night was far more difficult. So she waited, looking for anything anomalous. It had been years since any of the Mauds had dared make a move, but her mother’s disappearance was highly suspected to be a result of an opportunistic raid. It had been the final reason to institute a village-wide mandatory carry. In truth, Lilly was hoping she’d see one, to take blind revenge.

But she never did. The biting ants grew to be intolerable and the dipping sun threatened her objective, so she crept from her hiding spot and into the woods. She paused, eyes wide in a bid to allow more light. As she grew accustomed to the darkness, shapes became clear, and no immediate danger presented itself. Masking her silhouette against an oak, she finally attended to brushing the unwelcome guests from her thighs. Her attire, however comfortable for field work, was not ideal for heavy brush, and made even more cumbersome by the full-length silver-grey jacket father had insisted she wear. The cloth itself had no thermal properties, didn’t breathe well, and hampered her stealth. But it protected her from abrasions, and father had insisted, so she obliged. It had been another possession of mother, and mother was taller than she, so the jacket’s length presented some navigational hazards.

Lilly’s prize preferred the stream banks, and while they grew in more accessible areas, they were less plentiful than those which grew within the woods, not to mention they tasted different. It was an unusual type of very specific taste, and only her mother could tell the difference, but that wasn’t the point.

A sound. Lilly immediately shouldered her rifle and crouched. She peered through the optics, both eyes open to maintain her periphery, just as she had been taught. She held her breath to remain silent. She heard it again. Something fell to the forest floor. It was not a sound a man would make. It was a squirrel, dropping pecan fragments. Lilly exhaled in relief, stood, and resumed her task.

The leaves crunched softly beneath her feet. The season had been drier than usual, and it hampered her movement. She shuffled, walking toe to heal, minimizing the impact of each step. She changed gait at random, introducing variables to her stride. She knew how to stalk. Every hunter, however novice, learned through trial and error.

The sound of running water had grown steadily louder. She hadn’t recognized when she had started to hear it, but now it dominated the background. Freed from the burden of silent movement, Lilly assumed a more natural and efficient stride, until the brush parted and she was walking upon saturated soil. Her feet squishing in the muck, Lilly scanned the bank. The inner curve of the stream bore a marsh of rushes, but the outer bank was steeper and dominated by the telltale clumps of tubular leaves. She squatted and began her harvest, using thumb and knife to sever sprigs of the younger and shorter leaves. As a bonus, she harvested some nearby succulents—the kind with the orange flowers. The gooey tissue within made a nice salve to relieve the ant bites. It was a welcome respite.

The light was fading rapidly. Lilly donned her pack and unshouldered her rifle, holding it at the ready. She would leave through a different route—one more basic and ingrained precaution. It was difficult to ambush that which was unpredictable. Again she resumed the shuffling walk as the stream’s cacophony faded behind her.

The sound. Lilly stopped instantly. She waited, but didn’t hear it again. It was dusk now—past the point where woodland creatures would normally turn in for the night. At this, her caution turned to anxiety. She quickened her pace, giving less regard for noise now. Speed seemed the more tactical choice.

The sound again. Lilly stopped, and the sound stopped. She hopped briskly a few more yards and heard the sound again. She stopped, and the sound stopped. It was no longer coincidence. She spotted a glen and ran, keeping low. The sound in turn grew louder. Lilly entered the glen, cleared a fallen tree and turned, crouching. The open glen would give her clear line of sight. She peered over the log and stared intently, hoping the concentration would reveal shapes. The sound appeared ahead, further right, so she stood enough to swivel at the waste. She caught the semblance of a silhouette, but the arrow was faster than her reaction time. It hit low, glancing off the log and striking her left lower abdomen. The searing pain hampered her poise and she cried out, dropping the rifle.

The silhouette charged, something raised high for striking. Tears clouded her vision further, and she clumsily grasped for her weapon. In an instant, it was upon her, but it had to overcome the log. Lilly managed to stumble backwards and fell, just beyond the strike. The blow impacted the log with a dull thunk, and the weapon was embedded just long enough for Lilly to raise her rifle and fire.

The black bolt was almost invisible in the darkness, but it glowed with an unnatural essence and, although silent in itself, split the air with a sonic crack. The impact was center-of-mass, typical for a panicked shot, and the swirling eddies of purple verified the contact, ripping the life from the screaming creature. It stumbled backward in agony. Lilly, now fully terrified, ran, abandoning all reason as her naiveté to violence overcame her reason. Rather than verify the kill, she fled out of survival instinct.

The arrow, embedded at her waist, pressed uncomfortably into her flesh. But she ran on, screaming to attract attention. She neared home, and caught a glimpse of father emerging. The familiar returned a shred of confidence, and she spun, firing E-beams at random into the woods while screaming obscenities at what she hadn’t even identified. The sounds of father’s footsteps quickly crescendoed behind her. She vomited, then all was black.