The London Mayor some years ago, Ken Livingstone, was a huge proponent of public trasport and used it extensively.
The current Mayor, whilst still a proponent, likely does not use it. A quick glance at the social media that he recieves will tell you why - it would not be safe. He needs to travel with close protection officers.
The reason? He is Muslim, and Britain has become a very racist country indeed. Well, maybe always was, but the likes of Farage and Musk have so emboldened them that there is no longer a stigma.
Can confirm. Made a bit of a leftfield suggestion for an issue that there were no truly good solutions proposed for. I was tasked with building and deploying it. It's in production and working well so far (service which is 90% of our egress bandwidth). Got some really nice feedback from the director of technology at the Christmas social event.
I can't imagine that it's hurt my job security, and it's been far more interesting than waiting for someone to find me busywork to do.
I can't think of many better ways to demonstrate to your colleagues and corporate overlords that you are worthy of their trust than to readily hold up your hands if you've screwed up.
So long as you're not so incompetent that you're repeatedly doing stupid stuff or cynically causing issues so that you can make yourself look virtuous by owning up, of course.
In corporate context, admitting exernally-facing liability too easily violates executives' fiduciary responsibility to shareholders. For incentives aligning, need to figure out how to unravel that beasty.
On the contrary, I think it can be sold as a PR win: Think about how many companies torch customer goodwill by making a bad decision and then doubling and tripling down on it for months (before backpedaling and losing a ton of customers anyways).
I don't know, but I'd hazard a guess: not many? Or rather, plenty do, but they don't lose much customers - any company worth their salt is positioned to screw over their users, unintentionally or otherwise, with little to no consequences to its business.
I've built a proof-of-concept WireGuard VPN for work (SSO with mTLD portal/OIDC, BGP/WG tunnels to link edge servers into the network) and the team love it - better than the Cisco VPN they'd have to use otherwise.
Only problem is the config - I'd love a simple alternate WG app (for macOS/Windows) that could pull a config from a remote endpoint (checking signing) and bring up a WG tunnel with the config presented.
I've written a Golang client which shows up in the macOS menu bar and handles all this, but it's using the Brew WireGuard command line tools and needs sudo, etc., etc., so it's not really suitable for the average user.
There are quite a few open source wg clients out there, maybe you can get some ideas from those. Defguard, netbird come to mind.
I just want to avoid all that custom client stuff.
I don't have a solution, but I was experimenting on having a unique network url that would show different content depending if you're hitting it via the wireguard connection or not. Pretty basic stuff, just firewall rules and nginx proxying. Add the (hub) endpoint to client's AllowedIPs and route traffic on the hub depending on the networ interface and port the traffic is coming from.
So the client would connect to the wg network and open up the network page (eg. home.rudasn.wirehub.org).
If the connection is established, they would see a welcome message or whatever (if they need to update their config maybe a link to get their new one).
If the connection is not via the wg tunnel, they would see a message to first connect to the wireguard vpn. And if it's their first time, directions on how to install the official client and get their config from their admin (via wirehub.org or whatnot).
It's nice to have that automated via a custom client, but I don't think it's such a huge issue - if you would only update configs for client devices sporadically and have the server peers polling for updates every x seconds.
The downside of custom client apps is another security layer to consider, which nobody has the time for.
reply