Navy, Icyblue, Mint, Silver Shadow, Blueblack*, Coralred*, Pinkgold* (*Samsung.com exclusive)
Seccomp-BPF inside the namespace — blocking syscalls like clone3 (preventing nested namespace escape), io_uring (force fallback to epoll), ptrace, kernel module loading
。同城约会对此有专业解读
This sort of thing is why I think historians need to be more active in technical discussions and decision-making about emerging technology. Everything about our current world is different from the premodern world that our ancestors inhabited. The past truly is a foreign country. But we carry fragments of that foreign world with us in our physical selves, in the gestures and other implicit knowledge we teach our kids. We take it for granted that there are aspects of being human which are never written down and which are unknowable unless you experience them.
但更为严肃的是 ：豆包手机这么做大大冲击了阿里系、腾讯系的 APP 的利益 ，因为所有的操作都可以自动完成了，做为用户的我还有必要打开 APP 吗 ？