likeabatterycar

Listening to the audio, this wasn't some surreptitious hot mic recording, he was addressing employees about his frustrations at personally observing them fucking off in meetings and they were laughing. Somehow listening to his aggressive-but-disarming NYC style I can't help but agree with the guy.

It's not.

This is almost certainly Windows performing certificate validation.

The "evidence" was just copy pasted from VirusTotal. In fact he forgot to copy from below the cut, which would have shown it also called out to www.microsoft.com - depending who you ask, definitely a malicious address!

VirusTotal just notes all network traffic during the time the binary executed in the sandbox. It doesn't mean it emanated from the binary.

Probably Windows checking certificate revocation on a signed binary (or linked library).

Hit pieces are red meat to this place. They all high five each other, then quietly get into their Teslas for the drive home when no one is looking.

HN has been under a major astroturfing campaign lately IMO. The question is who is doing it.

Fortune 500s pay Palo Alto millions a year for their product and it's written in...PHP?

Yubikey is an event based token. You tap it with explicit intent. If you aren't expecting to tap it, then the fail safe is you don't. It works that way by design.

You can't use a screwdriver handle as a hammer then complain it doesn't work to your expectations.

> is the windows platform hostile to those sort of tools

No need for hyperbolics, just say you don't know.

The built in Windows Firewall does this. No need to pay for a 3rd party magic app.

Laud praise on Little Snitch all you want but Windows could quietly do this out of the box for two decades.

25 years ago we used ZoneAlarm and a variety of other tools.

Consider adding a mandatory keyword search when submitting a link - like every human-averse helpdesk.

Maybe if submitters see something was already submitted 800 times, they'll get the message; though, I have my doubts.