2021年，關恆開始思考前往美國的方法。當時，「走線」的方式仍未在中國人之間流行起來。他在研究資料之後，決定先到香港，然後飛往對中國免簽證的厄瓜多爾，再到巴哈馬，並在巴哈馬處購買了小型充氣船，在海上漂流近23小時後，偷渡進了美國的佛羅里達州。
Credit: NASA infographic
。业内人士推荐夫子作为进阶阅读
[&:first-child]:overflow-hidden [&:first-child]:max-h-full"。同城约会对此有专业解读
The code runs as a standard Linux process. Seccomp acts as a strict allowlist filter, reducing the set of permitted system calls. However, any allowed syscall still executes directly against the shared host kernel. Once a syscall is permitted, the kernel code processing that request is the exact same code used by the host and every other container. The failure mode here is that a vulnerability in an allowed syscall lets the code compromise the host kernel, bypassing the namespace boundaries.