top | item 43045782

(no title)

likeabatterycar | 1 year ago

> It is absolutely not that. To suggest this, considering the evidence posted, goes beyond idiocy into potential maliciousness

The scary IPs are part of DigiCert's CDN for OCSP responder (probably depending where you are and their anycast):

https://github.com/hoshsadiq/adblock-nocoin-list/issues/452

The "evidence" is the system made some network calls and DNS lookups. Which you know, you would do when validating a certificate. He also lists some SMB calls to the localnet which are clearly unrelated. tee.c source contains no network code so this would be truly easy to audit. So tell me again what is the damning evidence?

Also, are we to believe malware gangs are hosting on Akamai now? They must be in the major leagues.

And you call me an idiot?

Have a nice day.

discuss

order

j16sdiz|1 year ago

Thanks for your research.

Random googling shows lots of people have similar question, and most of time the tread just die out without answer.

phicdn.net as a privacy-protected domain from godaddy sure make the case more suspicious.

DigiCert (or whatever the owner piecdn is) could have save us lots of time just publishing that information on their website.