Hacker Newsnew | past | comments | ask | show | jobs | submit | mrbluecoat's commentslogin

Bad title.

Better executive summary: "A browser that lets you bypass censorship via BitTorrent-based residential proxies and Ceno-owned proxies"


Happily handing over all your private data to a shady tiger in a trenchcoat - seems like an apt visual for the current state of AI.

> Random mumblings of ARM developer ... RISC-V is sloooow

Old news. See also:

> Random mumblings of x86_64 developer ... ARM is sloooow


What kind or ancient arm hardware are they using here?

On a related note, SoC companies needs to get their act together and start using the latest arm cores. Even the mid range cores of 1-2 years ago show a huge leap in performance:

https://sbc.compare/56-raspberry-pi-500-plus-16gb/101-radxa-...


>What kind or ancient arm hardware are they using here?

I think that's the point being made here. ARM in the 2000s was not known to be fast, now it is.

RISC-V being slow isn't an inherent characteristic of the ISA, it only tells you about the quality of its implementations. And said implementations will only improve if corporations are throwing capitals at it (see: Apple, Qualcomm, etc.)


I think standard Arm cores are already plenty fast, the issue is the SoC vendors are still using cortex-A57 from 2015 instead of the new designs.

I am not talking about modern ARM though.

> Docker repurposed SLIRP, a 1990s dial-up tool originally for Palm Pilots, to avoid triggering corporate firewall restrictions by translating container network traffic through host system calls instead of network bridging.

Genuinely fascinating and clever solution!


Until recently, Podman used slirp4net[1] for its container networking. About two years ago, they switched over to Pasta[2][3] which works quite a bit differently.

[1] https://github.com/rootless-containers/slirp4netns

[2] https://blog.podman.io/2024/03/podman-5-0-breaking-changes-i...

[3] https://passt.top/passt/about/#pasta-pack-a-subtle-tap-abstr...


I don't think SLIRP was originally for palm pilots, given it was released two years before.

SLIRP was useful when you had a dial up shell, and they wouldn't give you slip or ppp; or it would cost extra. SLIRP is just a userspace program that uses the socket apis, so as long as you could run your own programs and make connections to arbitrary destinations, you could make a dial script to connect your computer up like you had a real ppp account. No incomming connections though (afaik), so you weren't really a peer on the internet, a foreshadowing of ubiquitous NAT/CGNAT perhaps.


> I don't think SLIRP was originally for palm pilots, given it was released two years before.

That's a mistake indeed; "popularised by" might have been better. Before my beloved Palmpilot arrived one Christmas, I was only using SLIRP to ninja in Netscape and MUD sessions onto a dialup connection which wasn't a very mainstream use.


SLIP not PPP. Those are two very different protocols. Otherwise your comment is fairly accurate. There were dial-in terminals, whether more expensive or not, that could be repurposed for generic Internet access.

I don't recall whether you could technically open listening ports, at least for a single connection, using slirp, but many, if not all systems, limited opening ports under 1024 to superusers, which (would have?) made running servers on standard ports more difficult.

In any case, I'm glad that you pointed out ACM's apparent revisionist history. They should know better.


repurposing a Palm Pilot dial-up tool to sneak container traffic past enterprise firewalls is unhinged and yet it worked the best infrastructure hacks are never clever in the moment they are just desperate that the cleverness only shows up after someone else has to maintain it.

VPNKit (the SLIRP component) has been remarkably bug free over the years, and hasn't been much of a burden overall.

There was another component that we didn't have room to cover in the article that has been very stable (for filesystem sharing between the container and the host) that has been endlessly criticised for being slow, but has never corrupted anyone's data! It's interesting that many users preferred potential-dataloss-but-speed using asynchronous IO, but only on desktop environments. I think Docker did the right thing by erring on the side of safety by default.


Exactly. "so I hung the radiator out the window" vibes.

I am trying to decipher the meaning of your comment, to no avail.

So you’ve never improvised an air conditioning system from a spare bilge pump, a propane tank and a cast iron radiator?

Sir, this is a hacker news.


Facts! That would've been covered on Hackaday not here.

Except it's the plain NAT which was named 'bridge' because there were no sysadmin around slap some sense into the authors. Slirp is for 'unprivileged network namespaces' which is for a 'rootless' variants of docker ie attaching a container network to the host without the need for the root-level privileges.

If only those services required age verification..

/s


Reminds me of a recent article.. title was something like "Cloudflare currently breaks RSA-2048 encryption with MitM certs." /s

They're also into bananas

so are people! we overthrew multiple countries for banan

"Bananoi", please. They aren't Latin.

It's mentioned in the article that the chimpanzees only relinquished the crystals in exchange for many bananas, so it seems they're more into crystals...

I've often joked about inflation and that while TVs may have become inexpensive, food has not.

Are you saying that I might be able to harvest the crystals in them and pay for bananas?


What's wrong with bananas?

They're a nightmare for atheists!

https://www.youtube.com/watch?v=nfv-Qn1M58I


I thought this was going to be the amazing atheist banana clip, was pleasantly surprised to be reminded of this instead

This is clearly a parody. right? right? please say yes.

The intelligent design controversy during the mid 2000's were a fun time. I still have some Flying Spaghetti Monster merch.

Watch the last few seconds.

A sizable percentage of the human population is deathly allergic to bananas.

I'm mildly allergic to bananas, but I don't think the number of people allergic to bananas is "sizable."

My son is not, and he will let you know how not allergic he is to Bananas if he sees any that he is not eating.

And this is relevant how?

Me too.

It's what they ate on the Red October


> thrives only in cold, turbulent waters over rocky seabeds, conditions nearly impossible to replicate in aquaculture

With our warming climate, I wonder if research is happening to develop heat-resistant agar, similar to coffee, cocoa, and rice.


Not a great analogy. Caffeine is not as addictive as opioids. Opioids strongly stimulate the mesolimbic dopamine pathway, leading to intense euphoria, compulsive use, and severe health and social harm.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: