likeabatterycar

Listening to the audio, this wasn't some surreptitious hot mic recording, he was addressing employees about his frustrations at personally observing them fucking off in meetings and they were laughing. Somehow listening to his aggressive-but-disarming NYC style I can't help but agree with the guy.

It's not.

This is almost certainly Windows performing certificate validation.

The "evidence" was just copy pasted from VirusTotal. In fact he forgot to copy from below the cut, which would have shown it also called out to www.microsoft.com - depending who you ask, definitely a malicious address!

VirusTotal just notes all network traffic during the time the binary executed in the sandbox. It doesn't mean it emanated from the binary.

> It is absolutely not that. To suggest this, considering the evidence posted, goes beyond idiocy into potential maliciousness

The scary IPs are part of DigiCert's CDN for OCSP responder (probably depending where you are and their anycast):

https://github.com/hoshsadiq/adblock-nocoin-list/issues/452

The "evidence" is the system made some network calls and DNS lookups. Which you know, you would do when validating a certificate. He also lists some SMB calls to the localnet which are clearly unrelated. tee.c source contains no network code so this would be truly easy to audit. So tell me again what is the damning evidence?

Also, are we to believe malware gangs are hosting on Akamai now? They must be in the major leagues.

And you call me an idiot?

Have a nice day.

Probably Windows checking certificate revocation on a signed binary (or linked library).

Hit pieces are red meat to this place. They all high five each other, then quietly get into their Teslas for the drive home when no one is looking.

HN has been under a major astroturfing campaign lately IMO. The question is who is doing it.

Fortune 500s pay Palo Alto millions a year for their product and it's written in...PHP?

Yubikey is an event based token. You tap it with explicit intent. If you aren't expecting to tap it, then the fail safe is you don't. It works that way by design.

You can't use a screwdriver handle as a hammer then complain it doesn't work to your expectations.

> is the windows platform hostile to those sort of tools

No need for hyperbolics, just say you don't know.

The built in Windows Firewall does this. No need to pay for a 3rd party magic app.

Laud praise on Little Snitch all you want but Windows could quietly do this out of the box for two decades.

25 years ago we used ZoneAlarm and a variety of other tools.

Consider adding a mandatory keyword search when submitting a link - like every human-averse helpdesk.

Maybe if submitters see something was already submitted 800 times, they'll get the message; though, I have my doubts.

[deleted]

Hard to hold a discussion when everyone is arguing in bad faith.

> guy in his 50s being forced to beg for his job in a 15 minute teleconference to an arrogant zoomer

So, like every private sector job nowadays?

Everyone is acting like this is the first time in history someone's been called into a meeting with a ponytailed 25 year old to have the "What is it ya do here?" discussion.

Memorialized in a movie so old now that most zoomers haven't even heard of it, let alone seen it. Only the Bobs have now been replaced with 'Skylar'.

How will these people mentally cope with the coming realities of having to trade their $300k comp (some of which didn't require a lot of work during their tenure) for making $80k writing CRUD apps and line of business software at some local shop 40hrs a week. The job market isn't great right now, not to mention oversaturated with programmers, it's not like they will all move over to Google tomorrow. Even if they have plenty of money, it's an ego hit to slash your comp by 2/3 just to stay employed. Not to mention they have the stink of layoff on them, even if you were a top performer it's the very first question recruiters ask incredulously. These people had a golden ticket but fell into the vat of chocolate.

No one in history has ever looked at a piece of machinery and thought, "You know what would make this better? Castration by EU government regulations."

Meanwhile the EU bathes in the same Chinese garbage imported by the boat-load as long as it carries the CE mark, which they are allowed to self-certify in nearly every case, making it meaningless.

Signtool interfaces with any kind of certificate including on smartcard.

https://www.mgtek.com/smartcard

For automating pin entry

What is wrong with Microsoft's free signtool.exe?

Or based out of Arizona, home of Tombstone and the OK Corral.

> Using it as a pejorative in the way you are is how the right wants to use it, but it is also racist, sexist, and ablist

Oh please.

> Is Google going to avoid interviewing anyone from a HBCU now?

No, because that would obviously be racist.

DEI would be favoring one candidate over another specifically due to immutable personal characteristics, not their qualifications for the job.

The just thing would be students from HBCUs having a level playing field along with everyone else.

It's no different than hiring managers selectively preferring graduates from Stanford or based on their surname's ethnicity, but it's hard to prove those things happen.

My data says otherwise and you have provided nothing to back up your claim other than saying we have an industry full of dirty money paying programmers to write unethical code. I'm sure it inspires them to do their best work.

Half these imbeciles don't even change the user-agent from the scraper they downloaded off GitHub.

I employ lots of filtering so it's possible the data is skewed towards those that sneak through the sieve - but they've already been caught, so it's meaningless.

Most people with jobs and families etc. don't have a day per week nor gas money to spare to drive seven hours each way to go egg foraging. It's great you can manage this luxury but it's just not practical and a fairytale life for 99% of people. Not to mention many people in NYC don't own a car.

> within 7 hours of NYC

Literally the definition of "not local"

> help supply the 19 million people of NYC with fresh eggs

This sounds like it could be one of Kramer's schemes on Seinfeld, where he's loaded his rusted-out jalopy with 5k eggs to bring into the city to sell for a profit, but somehow they end up all over the freeway and chaos ensues.

> For one thing it's trivial for malicious actors to change their user-agent.

Absolutely true. But the programmers of these bots are lazy and often don't. So if Cloudflare has access to other data that can positively identify bots, and there is a high correlation with a particular user agent, well then it's a good first-pass indication despite collateral damage from false positives.

I run a honeypot and I can say with reasonable confidence many (most?) bots and scrapers use a Chrome on Linux user-agent. It's a fairly good indication of malicious traffic. In fact I would say it probably outweighs legitimate traffic with that user agent.

It's also a pretty safe assumption that Cloudflare is not run by morons, and they have access to more data than we do, by virtue of being the strip club bouncer for half the Internet.

I love how British eggs have deep, amber yolks. Are they force-feeding the hens Earl Grey?

Ok, but, you can't feed 340M people with "fresh, local eggs". While it's nice you buy six eggs at a time from Joe Farmer off the back of his '72 Ford, but factory farms are an unfortunate necessity to feed everyone that isn't so privileged.

Next you're going to tell me that the cobalt used to make batteries for the electric vehicles literally saving the environment right now in the West is being mined by enslaved children in the Congo with archaic hand tools and no PPE under inconceivable conditions.