This is great, but I'd be more interested in seeing how congestion pricing impacts travel times for buses, specifically, (within and around the congestion zone, including express routes from the outer boroughs), as well as overall transit ridership.
Keys on shabbat is doable without an eruv¹²³. (It's not considered carrying if it's an integral part of your clothing.) Eruvs are more for strollers/carrying small kids, dessert/wine when invited for lunch, etc.
Yeah, this is covered in the Eruv wikipedia article as well, but was not mentioned in the L.A. Times article (at least as far as I can remember—it’s been 15+ years since I read it).
Verizon, actually. Not the mail tubes specifically, but they own Empire City Subway, a 130 year old company rents out sub-street conduit for telecom. Their tubes are visible when streets are dug up for construction.
They've been connected since 1991[1]. Amtrak runs trains from Canada/Chicago/Vermont into Penn using this connection. Trains run down Metro North's Hudson Line, through a junction in Spuyten Duyvil[2], down the West Side Line[3] (former northern section of the High Line[4]), and into Penn through a tunnel under the LIRR's West Side Yard[5]. You can see the connection here[6] (follow "EC Freedom Tunnel"). The connection under the West Side Yard was built in '86. The rest of the tracks are over 100 years old.
I use ESET NOD32 and am happy with it. It does its job with "dignity" (no Norton-style hyperbolic popups), consumes little resources, and is inexpensive. It does a great job blocking malware and has a nice blocker for "potentially unwanted applications" (https://help.eset.com/glossary/en-US/unwanted_application.ht...).
The cheapest licenses are available on Amazon. Either NOD32 or Smart Security do the job -- I buy whatever is cheapest when the licenses expire.
I'm the family IT guy for my immediate family. Around five years ago, after fixing the nth malware infection on family computers, I bit the bullet and bought a few multi-seat ESET licenses for my parents, siblings, and their families. I haven't had to fix a virus/malware issue since then. Prior to this, they were all just using Windows Defender. I used one of the licenses on my own computers, so I have direct experience with the software, as well.
I install Unchecky (https://unchecky.com/) along with NOD32. This is a free tool that provides a second layer of protection against drive-by toolbar installs.
1) An experiment to test the level of familiarity that non-technical users have with two factor authentication. That is, does a person who incidentally enabled SMS 2FA understand that having to enter an SMS code every time they log in is a pattern called "two factor authentication" as opposed to just some weird part of Google's login workflow.
2) An artifact of a user's security preferences living in a protected space that can't be accessed by Gmail's frontend. Gmail's dev team got an order to encourage users to enable 2FA and this is the best they could do.
3) A ploy to get people to review their 2FA settings -- or to be sold Titan Security Keys. Google's security team has sent me several emails over the past few months encouraging me to buy these, claiming that I'm at an increased risk of a targeted attack. I'm not fully bought in to their motives.
I've been using both mitmproxy and IOXY (https://github.com/NVISOsecurity/IOXY), an intercepting proxy made specifically for MQTT. IOXY is a small, less mature project, but it's definitely worth checking out as a compliment to mitmproxy. Many devices managed via AWS IoT phone home over MQTT and, my limited experience aside, it looks like many don't bother validating certificates when authenticating over this protocol.
- Password manager for both password storage and 2FA OTP generation. (Not the best practice, but the convenience is worth the trade-off.)
- Password manager for almost all 2FA backup code storage. Both the best place and the dumbest place to store these. "The best" because it's pretty secure; "the worst" because it's a single point of failure AND if I can access my password manager I already have access to my 2FA OTPs. I regularly make an encrypted backup of my password vault.
- Authy for 2FA OTP generation for my password manager.
- A printed card in my wallet for 2FA backup codes for my email account and password manager. Password manager master password is kept in a safe (in case I get hit in the head and forget it).
On this note, it would be nice for mobile OS's to have their own OTP generator, to prevent the need for a single app just to store the password manager OTP. Google has Authenticator, but I don't know if there's a built-in to iOS, which could have keyboard-based convenience pasting too.
In New York, where I live, inspections are done by private mechanics (with a state license). There's a posted inspection standard (https://dmv.ny.gov/brochure/new-york-state-vehicle-safetyemi...). Lights must be "of an approved type," but I'm not sure how you can reliably check this in a shop.
Also, some mechanics are more stringent than others. Some are outright shady. New York sets a flat $37 fee for inspections, paid to the mechanic. The fee is low, so there's an awful incentive here to look for high-margin items that "need" to be repaired to pass the inspection. Brakes and windshield wipers are some of those items. A set of aftermarket light fixtures -- if they can even be identified -- not so much. (This is anecdotal, but I've experienced this type of inspection on more than one occasion.)
Other states, like New Jersey, do inspections solely at state-owned inspection facilities.
Regarding sales, it's not illegal to manufacture off-spec fixtures. It's illegal to have them on your car on a public road.
@gotmedium, would you consider integrating:
1. MTA's Bus Time feed: https://bustime.mta.info/wiki/Developers/Index and 2. MTA bus/MNRR/LIRR/Access-A-Ride ridership feed: https://data.ny.gov/Transportation/MTA-Daily-Ridership-Data-... 3. Equivalent feeds for city-connected NJ transit services.