Трамп высказался о непростом решении по Ирану09:14
ВсеРоссияМирСобытияПроисшествияМнения，推荐阅读safew官方版本下载获取更多信息
The Sentry intercepts the untrusted code’s syscalls and handles them in user-space. It reimplements around 200 Linux syscalls in Go, which is enough to run most applications. When the Sentry actually needs to interact with the host to read a file, it makes its own highly restricted set of roughly 70 host syscalls. This is not just a smaller filter on the same surface; it is a completely different surface. The failure mode changes significantly. An attacker must first find a bug in gVisor’s Go implementation of a syscall to compromise the Sentry process, and then find a way to escape from the Sentry to the host using only those limited host syscalls.，这一点在搜狗输入法2026中也有详细论述
（一）设立专门机构或者指定专门人员直接负责网络犯罪防治工作，网络运营者负责人为第一责任人；
第一百零五条 公安机关办理治安案件，对与案件有关的需要作为证据的物品，可以扣押；对被侵害人或者善意第三人合法占有的财产，不得扣押，应当予以登记，但是对其中与案件有关的必须鉴定的物品，可以扣押，鉴定后应当立即解除。对与案件无关的物品，不得扣押。