Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Linux under WSL2 can be leaking

mullvad.net

Post reply on HN
Print view View original

181–190 of 194 posts

Re: Linux under WSL2 can be leaking

#181

Post by wing-_-nuts »

smartbit wrote: post #40
speedgoose wrote: post #29

Earlier quoted context omitted.

Did you consider the average pollution of bitcoin transactions?

Good question. OTOH, did anyone ever consider the average pollution of the banking system? 10.000th of banks, 200+ central banks, BIS, IMF, ECB, etc, etc. Millions of employees, millions of desktops & servers, day-in-day out. Anyone with a link to a guestimate?

I personally can't wait until most crypto currencies move to proof of stake over proof of work. I wish the UN would coordinate some sort of global carbon tax initiative. Want to mine crypto? Ok, but you're paying for the co2. No more free rides!

Re: Linux under WSL2 can be leaking

#182

Post by nybble41 »

p1necone wrote: post #160
nybble41 wrote: post #129

Earlier quoted context omitted.

It's the inflation that's expensive, not the transaction processing. The threshold for economical power use in bitcoin mining scales in proportion to the block reward, not block size or number of transactions. Since the rate of inflation decreases exponentially (the block reward in BTC halves every four years) this issue will eventually resolve itself.

According to the numbers above a bitcoin transaction is currently 591715 times as expensive (in kwh) as a visa transaction. If a transaction costs half as much power every 4 years that's only 193 years until it's cheaper than visa[0]! Truly the financial instrument of the (distant) future! [0] https://www.wolframalpha.com/input/?i=x%5E2+%3D+%281005%2F%2...

Visa doesn't solve the same problems as Bitcoin, so this isn't comparing apples to apples. Bitcoin isn't a centralized, credit-based payment network; it was designed as an electronic alternative to cash. (Don't forget to include the economic and social cost of global anti-counterfeiting measures necessary to maintain the USD market value in the cost of the Visa system!) Also, the reward halving schedule applies to blocks, not transactions. Any of the scaling solutions which increase the number of transactions per block (e.g. the Lightning network) will proportionally reduce the power expended per transaction.

Re: Linux under WSL2 can be leaking

#183

Post by yencabulator »

xnyan wrote: post #135
rbanffy wrote: post #125

Earlier quoted context omitted.

> windows firewall rules should not in any case be applied to traffic coming from a VM I can't agree with this. Everything is running on Windows. The VM runs on Windows and WSL exchanges data with Windows all the time. That the data on the Windows side can leak because I installed a Microsoft-approved product from the Microsoft store on a Windows box with a Microsoft firewall is unacceptable.

Here’s the issue with your issue: if you are using WSL2 (or other various win10 configurations involving hyper-v), then windows is not running on bare metal anymore. In this scenario, windows is just another guest operating system subject to a hypervisor. Windows is a VM, and your in-VM firewall applies to the VM in which its running. This is how you get real linux “on” windows - the on part is an illusion, trickery…

In which case it sounds like the Windows tools for configuring things should configure HyperV's networking too.

You know, just like the software inside the Windows VM can launch a separate Linux VM; you're already controlling HyperV from inside that VM.

Re: Linux under WSL2 can be leaking

#184

Post by Tijdreiziger »

nybble41 wrote: post #182
p1necone wrote: post #160

Earlier quoted context omitted.

According to the numbers above a bitcoin transaction is currently 591715 times as expensive (in kwh) as a visa transaction. If a transaction costs half as much power every 4 years that's only 193 years until it's cheaper than visa[0]! Truly the financial instrument of the (distant) future! [0] https://www.wolframalpha.com/input/?i=x%5E2+%3D+%281005%2F%2...

Visa doesn't solve the same problems as Bitcoin, so this isn't comparing apples to apples. Bitcoin isn't a centralized, credit-based payment network; it was designed as an electronic alternative to cash . (Don't forget to include the economic and social cost of global anti-counterfeiting measures necessary to maintain the USD market value in the cost of the Visa system!) Also, the reward halving schedule applies to b…

Credit-based transactions are a subset of Visa transactions. Visa Debit and V PAY were indeed designed as an electronic alternative to cash (as were MasterCard Debit and Maestro on the MasterCard side).

Re: Linux under WSL2 can be leaking

#185

Post by teddyfrozevelt »

marcan_42 wrote: post #97
Jonnax wrote: post #39

Earlier quoted context omitted.

Why? In my opinion Linux desktop environments are terrible compared to Windows. How's the display scaling these days? Is it still a better experience to run a 4k monitor at a lower resolution? What's the Nvidia driver situation? Still janky because their drivers are doing their own thing?

I just switched to a 4K monitor last week. Set display scaling to 1.5x in the KDE settings, logged in again, and everything looks great and scales cleanly. I haven't noticed any weird artifacts or bizarre UIs yet. It just works. Except Spotify, that needs a command line flag to set the scale factor, but that app is well known to be half-assed on Linux (they also don't support input methods, so searching for Japanese…

As an aside for Spotify, the Flatpak version has added some nice hacks around scaling, theming, and deep links.

https://github.com/flathub/com.spotify.Client

Re: Linux under WSL2 can be leaking

#186

Post by _lqaf »

Barrin92 wrote: post #163
drexlspivey wrote: post #98

Earlier quoted context omitted.

Luckily there is a mechanism for resource allocation and it is called price. I pay for 1 MWh, you pay for 1MWh and it doesn't matter what we use the energy for. If you have an issue with how the energy is generated take it up with your local government.

>Luckily there is a mechanism for resource allocation and it is called price I mean we don't really have that in the case of bitcoin, which is predominantly mined in China these days probably precisely because state subsidised energy projects have created a ton of useless energy surplus, on which bitcoin lives. Which is ironic in and of itself, the libertarian currency de jure runs on the misallocated resources of a…

I'm not sure that's ironic. A lot of libertarian types don't seem to mind authoritarians as business partners, they just don't want to live that way.

Re: Linux under WSL2 can be leaking

#187

Post by donor20 »

MiroF wrote: post #165
donor20 wrote: post #162

Earlier quoted context omitted.

Here is what they say is the "leak" "How it leaks WSL2 uses Hyper-V virtual networking and therein lies the problem. The Hyper-V Virtual Ethernet Adapter passes traffic to and from guests without letting the host’s firewall inspect the packets" So they are complaining that the linux subsystem and distribution packets are not processed by the windows firewall. I don't know what to tell you, but the idea that the windo…

You didn't reply to the article directly, you replied to a comment on the article - one that was making the exact point that you are repeating.

I thought they were saying microsoft needs to document this third party software behavior. Definitely the VPN folks should document this.

Re: Linux under WSL2 can be leaking

#188

Post by erredois »

ncmncm wrote: post #147

For reference, this kind of problem is avoided on QubesOS (another, Xen-based, hypervisor system) by routing all traffic through another VM that entirely owns the network hardware. I run my Wireguard on that VM. The host OS image, dom0, also routes its network traffic through that VM, to get updates. (It doesn't trust the updates it gets that way; it checks their signatures.) QubesOS provides another VM as a dedicate…

This is interesting, I wonder if it's possible to simulate this behavior configuring the hyper-V networking layer.

Re: Linux under WSL2 can be leaking

#189

Post by chmod775 »

jsjohnst wrote: post #177
chmod775 wrote: post #175

Earlier quoted context omitted.

> but claiming it’s unlikely that someone owns more than five devices is silly No I specifically said use , not own . You can own more than 5 devices with your mullvad account number, you just can't be connected on all of them at the same time. Also I wasn't expecting people would share their accounts with their family, which is already questionable.

> Even just owning that many is unlikely. > No I specifically said use , not own . These two verbatim quotes from you seem to be in conflict with each other.

My question was about using that many devices. And I'll quote myself here fully:

> Out of curiosity, how do you even manage to use more than five devices for private use at once? Even just owning that many is unlikely.

One sentence is a question, the other is a statement which I consider to be true (and explains how I arrived at that question).

Also it was quite clear from my argument that I was talking about people singular, and you responded pretending I was saying that an entire family owning more than 5 devices is unlikely.

I can't imagine why you'd be arguing like this, I just hope it's not on purpose.

Re: Linux under WSL2 can be leaking

#190

Post by ncmncm »

erredois wrote: post #188
ncmncm wrote: post #147

For reference, this kind of problem is avoided on QubesOS (another, Xen-based, hypervisor system) by routing all traffic through another VM that entirely owns the network hardware. I run my Wireguard on that VM. The host OS image, dom0, also routes its network traffic through that VM, to get updates. (It doesn't trust the updates it gets that way; it checks their signatures.) QubesOS provides another VM as a dedicate…

This is interesting, I wonder if it's possible to simulate this behavior configuring the hyper-V networking layer.

Almost certainly.

I know of people who run Windows 10 in a Qubes VM. It is dizzying to think of what they are really doing: running a Hyper-V system, with its own VMs, in a VM on a Xen hypervisor.

Post reply on HN