Hacker Newsnew | past | comments | ask | show | jobs | submit | more gdgghhhhh's commentslogin

Just share an open FD to a socks proxy with the isolated service.


This depends on the service itself supporting inheriting sockets for proxies. Is this a common feature? Some services do support listening socket passing which does solve my problem as I can make it listen on a UNIX socket mounted on the host and accessible to the reverse proxy but many of the lower quality services that I want to give this treatment to don't support that either.


As another commenter says, you can use socat. Specifically, you can run it in double client mode (see http://www.dest-unreach.org/socat/doc/socat-gender.txt) to connect the UNIX socket to the service.


I fear it's closed source?


It may be proprietary but it's developed by Tuxera, the same lads who created and maintain the NTFS drivers for Linux.


If it is a choice between preparing my sd cards with open partitioning tools, or running some non-auditable official tool in binary form, it is an easy choice.

I'll do the former, as I always have.

By the way, a cool quote from the agreement preceding the download page:

>3. RESTRICTIONS: You agree to NOT: (a) disassemble, reverse engineer, decompile, or otherwise attempt to derive any source code for the SDA Software from executable code;

This should be quite alarming. They insist that we format SD cards with their tool, but they don't want us to know what the tool does.

I will not be the one reversing them, but I checked it is possible to download these through tor, and recommend downloading them that way to prevent potential trouble.

The hashes for the files I obtained are:

SDCardFormatterv1.0.2_Linux_ARM64

MD5: 2CF66295A29C5F496A489074CBC42CFA

SHA1: EE06C0C6834EB9F53E66343A7CFDB95FCCB5FF66

SHA256: 8695A0F441129845136AFEE01D94D6DBCCBE87BA7C904F045F2AF0613F9A1978

SDCardFormatterv1.0.2_Linux_x86_64

MD5: 459A698C3961BACA8103173B3CDA7173

SHA1: C28EFFDF05FF186E56C57476C2794CC7A7AE3AF0

SHA256: 3D961085954ABEB764265184A92C1114AA4CEF9CF12CA3C3337B6B63E0DBE0FB


> 3. RESTRICTIONS: You agree to NOT: (a) disassemble, reverse engineer, decompile, or otherwise attempt to derive any source code for the SDA Software from executable code;

Depending on where you live, this might have no legal effect. Some jurisdictions allow explicitly for reverse engineering & co. for different purposes (e.g. research, interoperability with other systems, etc.).


SD Cards have computers inside of them. Security conscious users will be really worried using a blob for their stuff.


Are there any open source sd card firmwares?

Would be an interesting project, I have no idea how you could reprogram them though.


Some manufacturers have proprietary undocumented APIs that allow the host to upgrade the firmware in the card, but I’m not sure every maker does, and very sure most wouldn’t bother to update their firmware unless some horrendous issue came up.


Hard drives, USB sticks and SSDs too...


So what? Don't get ne wrong, tuxera is cool but this still does not make it free software.


Is closed source not allowed for Linux?

If you want an open source SD card formatter for Linux, you can mkfs.vfat /dev/mmcblk0 all day long, works just fine.


It's allowed but people who use Linux want to know about these things ahead of time, as many of us seek to reduce the amount of closed-sourced code running on our systems to give us peace of mind.


Would you entrust a software you can’t audit to format your computer’s disks?


Would you entrust a software you can’t audit to format a device with software you can’t audit?


People who use Windows or Mac do that all the time?


I wonder how it compares to ELBE. https://elbe-rfs.org/


On large projects like Linux the overhead of frame pointers is visible. https://lore.kernel.org/all/20170602104048.jkkzssljsompjdwy@...


Registers aren't free; of course turning on frame pointer elision is going to give you a few extra percentage points of performance. The problem is that it will interfere with your performance team's ability to further profile the program and triage crashes, which is very, very likely going to be worse in the long run than the savings you get from this particular optimization. On register-starved environments like x86 (like the one you linked) it's somewhat forgivable but on any modern platform it's a bad tradeoff 99.9% of the time.


That's why Linux has the ORC unwinder. It is fast and reliable, in contrast to frame pointer unwinding.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: