Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Linux under WSL2 can be leaking

mullvad.net

Post reply on HN
Print view View original

171–180 of 194 posts

Re: Linux under WSL2 can be leaking

#171

Post by davidgerard »

smartbit wrote: post #40
speedgoose wrote: post #29

Earlier quoted context omitted.

Did you consider the average pollution of bitcoin transactions?

Good question. OTOH, did anyone ever consider the average pollution of the banking system? 10.000th of banks, 200+ central banks, BIS, IMF, ECB, etc, etc. Millions of employees, millions of desktops & servers, day-in-day out. Anyone with a link to a guestimate?

Yes, they did! Note that, like you, 0 bitcoiners who have ever raised this objection put a number in.

* Bitcoin: 0.1% of all electricity, 7 transactions per second.

* THE ENTIRE REST OF CIVILISATION, FINANCIAL SYSTEM AND ALL: 99.9% of electricity, a heck of a lot more than 6,993 transactions per second.

Re: Linux under WSL2 can be leaking

#172

Post by dagaci »

Let me get this right: Installing WSL2 causes HyperV to be installed. When Hyper-V is installed, HyperV replaces Windows as the Machine Host. Therefore Windows itself becomes a guest OS of Hyper-V, and the installed Linux also becomes a guest of HyperV.

So what mullvad would prefer is that Linux traffic to be routed through the adjacent Windows Guest by default, so that the windows software can control the Linux network traffic.

I think a better solution would be to explore creating a VPN solution for HyperV OS itself if possible...

Re: Linux under WSL2 can be leaking

#173

Post by adriancr »

sally1620 wrote: post #43
adriancr wrote: post #23

Earlier quoted context omitted.

You can set up a docker vpn client as well

I tried docker. "Always Require VPN" didn't work with docker.

I do it like this, can provide scripts if you're interested.

One docker image with openvpn:

1. at startup erases all routes except to VPN gateway and 8.8.8.8.

2. before and after connect it only has routes through VPN (no default ones - if vpn goes down, network goes down until re-established)

Start it like:

# ... --name vpn ...

Another docker image with what I want VPNed gets started with the network of the first

# ... --net container:vpn ...

I keep a browser within the second docker image (firefox) and use my main machine to show it. Note: you want to pass '--no-remote' to it and likely split /dev/shm

It can't really leak since it doesn't have routes to do anything other then through VPN.

Re: Linux under WSL2 can be leaking

#174

Post by mlonkibjuyhv »

jodrellblank wrote: post #127
johnisgood wrote: post #66

Earlier quoted context omitted.

I cannot wait for nuclear fusion to finally be here so people will stop worrying about the electricity consumption, and high consumption will not mean pollution or whatever.

All the electricity we generate becomes waste heat in the atmoshpere. Global energy use is currently ~0.1% of Sun power hitting the Earth. USA uses ~10x more electricity per person than India does, assume bringing everyone up to USA levels means we'll be around 1% of Sun power. Grow the population from ~8Bn to predicted ~12Bn and we'll be around 1.5%. And then everyone gets "too cheap to meter" fusion power? There is…

Energy usage will explode! Imagine all the ways to use energy that hasn't been economically viable before. I think the only way that will work out, is if the energy consumption happens off-planet.

Re: Linux under WSL2 can be leaking

#175

Post by chmod775 »

jsjohnst wrote: post #122
chmod775 wrote: post #61

Earlier quoted context omitted.

Mullvad uses the superior way of not having a real account at all - you just get a number you can "deposit" money into. It's the only way they can reliably prevent abuse like a thousand people using one number - because this way you can just track the number of open connections per account number. This is superior to tracking IP-addresses to detect fraud for obvious privacy reasons. I do a similar thing for a service…

> Out of curiosity, how do you even manage to use more than five devices for private use at once? Even just owning that many is unlikely. I’m not GP and I certainly don’t take GP’s stance about limiting to 5 devices (I think it makes sense), but claiming it’s unlikely that someone owns more than five devices is silly, especially if someone has a family. My non-tech sister’s family of four has two phones, three iPads,…

> but claiming it’s unlikely that someone owns more than five devices is silly

No I specifically said use, not own. You can own more than 5 devices with your mullvad account number, you just can't be connected on all of them at the same time. Also I wasn't expecting people would share their accounts with their family, which is already questionable.

Re: Linux under WSL2 can be leaking

#176

Post by buran77 »

xnyan wrote: post #135
rbanffy wrote: post #125

Earlier quoted context omitted.

> windows firewall rules should not in any case be applied to traffic coming from a VM I can't agree with this. Everything is running on Windows. The VM runs on Windows and WSL exchanges data with Windows all the time. That the data on the Windows side can leak because I installed a Microsoft-approved product from the Microsoft store on a Windows box with a Microsoft firewall is unacceptable.

Here’s the issue with your issue: if you are using WSL2 (or other various win10 configurations involving hyper-v), then windows is not running on bare metal anymore. In this scenario, windows is just another guest operating system subject to a hypervisor. Windows is a VM, and your in-VM firewall applies to the VM in which its running. This is how you get real linux “on” windows - the on part is an illusion, trickery…

As far as I know this is how Hyper-V worked since at least Windows 8(.1?). Installing the role would relegate the Windows OS to guest VM status, albeit with more privileges than any other VM.

Microsoft should make it more obvious since most Windows 10 users shouldn't be expected to make this distinction by themselves.

Re: Linux under WSL2 can be leaking

#177

Post by jsjohnst »

chmod775 wrote: post #175
jsjohnst wrote: post #122

Earlier quoted context omitted.

> Out of curiosity, how do you even manage to use more than five devices for private use at once? Even just owning that many is unlikely. I’m not GP and I certainly don’t take GP’s stance about limiting to 5 devices (I think it makes sense), but claiming it’s unlikely that someone owns more than five devices is silly, especially if someone has a family. My non-tech sister’s family of four has two phones, three iPads,…

> but claiming it’s unlikely that someone owns more than five devices is silly No I specifically said use , not own . You can own more than 5 devices with your mullvad account number, you just can't be connected on all of them at the same time. Also I wasn't expecting people would share their accounts with their family, which is already questionable.

> Even just owning that many is unlikely.

> No I specifically said use, not own.

These two verbatim quotes from you seem to be in conflict with each other.

Re: Linux under WSL2 can be leaking

#178

Post by jsjohnst »

chmod775 wrote: post #175
jsjohnst wrote: post #122

Earlier quoted context omitted.

> Out of curiosity, how do you even manage to use more than five devices for private use at once? Even just owning that many is unlikely. I’m not GP and I certainly don’t take GP’s stance about limiting to 5 devices (I think it makes sense), but claiming it’s unlikely that someone owns more than five devices is silly, especially if someone has a family. My non-tech sister’s family of four has two phones, three iPads,…

> but claiming it’s unlikely that someone owns more than five devices is silly No I specifically said use , not own . You can own more than 5 devices with your mullvad account number, you just can't be connected on all of them at the same time. Also I wasn't expecting people would share their accounts with their family, which is already questionable.

> Also I wasn't expecting people would share their accounts with their family, which is already questionable.

Do families not already share Netflix, iTunes, Spotify, Amazon Prime, etc etc? I’m not sure why it would be such a leap for them to share a VPN, especially if the reason they are using the VPN at all is simply to get around GeoIP restrictions (which I’m not condoning, but obviously many do it).

Re: Linux under WSL2 can be leaking

#179

Post by ahoka »

rbanffy wrote: post #169
zokier wrote: post #134

Earlier quoted context omitted.

> Everything is running on Windows. The VM runs on Windows As far as I understand, that is not quite right. With WSL2, everything is running on Hyper-V, the VM and Windows both run in parallel on Hyper-V.

Wow! Just installing WSL-2 makes such a fundamental change to how Windows itself runs?

Enabling hyper-v does.
Post reply on HN