由酒店脱库事件想到的：虽然Shadowsocks和V2Ray都是代理工具，但也具备了一些VPN的特性。比如用户可以强制中转127.0.0.1的流量，把服务器当成内网。复杂一点的做法是把一个域名解析为内网IP，从而绕过一些基于IP的防御机制。所以，所有不能实时解析DNS并拦截内网请求的代理工具，都是有安全隐患的。在选择代理工具时，请仔细查阅其文档或源代码。当然，V2Ray的出厂设置(Linux)，就已经包含了上述的拦截。
BY Project V 公告
The campaign, which security firm Check Point has named Rampant Kitten, comprises two main components, one for Windows and the other for Android. Rampant Kitten’s objective is to steal Telegram messages, passwords, and two-factor authentication codes sent by SMS and then also take screenshots and record sounds within earshot of an infected phone, the researchers said in a post published on Friday.
The S&P 500 slumped 1.8% on Monday and Tuesday, thanks to China Evergrande, the Chinese property company that looks like it is ready to default on its more-than $300 billion in debt. Cries of the next Lehman Brothers—or maybe the next Silverado?—echoed through the canyons of Wall Street as investors prepared for the worst.
Project V 公告 from nl