banksecopsguy

Why does it make sense to have permanent DST instead of a permanent change in office timing? Why permanently change the meaning of what it means to be a midnight w.r.t. the sun when one can elegantly achieve the same effect by permanently changing the office hours?

Well, under the hoods of DST, every employer is changing their schedule (relative to the sidereal midnight) at once anyway, by agreeing to abide by DST and forwarding their clocks at once.

Then why not agree to change the office timings at once?

My second question: Why do countries prefer to use DST when they could achieve the same effect by changing the work timings, school timings, etc. That is say, the work timings are 9 AM - 5 PM. Instead of applying DST in summer, they could instead change the work timings to 8 AM - 4 PM. Why is this not preferred? Isn't it simpler to keep the clock constant and the work timings variable than keeping the work timings constant and the clock variable? Personally, I think it is simpler for me to understand changes in work timings than changes in DST. Several times, I have had to perform mental gymnastics to figure out which way the clock moved and how it affects my schedule, i.e. whether I need to be sleeping an hour earlier than usual or an hour later than usual.

I have two questions that I will ask as two separate comments.

My first question: How does forwarding the clock by 1 hour in summer give one extra hour of daylight? Say, without DST on a certain summer day, the sun would normally (without DST) rise at 5 AM and set at 7 PM. Also, say that I normally work from 9 AM to 6 AM. Without DST, I am working when the sun is there. With DST in effect (clock being one hour forward), the sun would rise at 6 AM and set at 8 PM my 9 AM to 6 AM working hours still fall within the time when the sun is there. What is gained? Can you give an example of times and working hours that demonstrates the usefulness of DST in summer?

I work in a major bank SecOps. Here we use RSA Security Analytics for aggregating packets and logs from all over the network, fire alerts and do our analysis.

I would like to know if someone here has used both RSA Security Analytics and Security Onion, and what they think about how they compare against one another. The last time (which was about 2 years ago) RSA Sales people came to our site and showed the capabilities of their product, it seemed to exceed the capabilities of Security Onion, but I am still a junior guy in SecOps and I still have a lot to catch up and learn, so I don't have the sufficient knowledge and expertise to determine how they compare against one another and what the pros and cons of each product are.