← Back to context

Comment by dwaltrip

4 years ago

Because Windows is so much better?

Users should not put up with this kind of thing, no matter what OS. Forced updates, online startup checks...all unacceptable in my opinion.

Imagine no car or train in the region starting because of a server outage. People would riot on the streets. But for some reason in the IT world this kind of crap is marketed as a feature.

  • I agree! I would love that.

    However... Where can I buy a computer free of all of those issues?

It doesn't have this particular failure mode, at least.

  • Both Linux and Windows perform similar checks.

    • Do you know of a Wireshark filter that will reveal this on Ubuntu? What you're saying doesn't sound credible, but to incentivize, here's the bet:

      If you can provide a Wireshark filter that will show a certificate check on a vanilla Ubuntu 20.04 system when the following commands are executed in a bash shell, then I will donate $25 to a charity of your choice. Commands follow:

          cat <<HEREDOC >/tmp/file.c
          #include <stdio.h>
      
          int main() {
            printf("Hello World");
            return 0;
          }
          HEREDOC
          gcc /tmp/file.c -o /tmp/app
          /tmp/app

    • I'm sure Linux (the kernel) does not. I don't know of any Linux distro that does, but, I'd be curious if you can point to specifics.

      If you could point to any documentation of Windows performing app-start OCSP checks, I'd love to learn more (and recant my earlier statement).

    • That's a rather extraordinary claim. It's really setting off my BS meter- Can you show us where the code is to do that in the Linux kernel?

    • No, Linux does not.

      Linux does provide application-level and per-application security, as well as sandboxes, but they exist to help the user and the user has complete control over them and their system.

    • The comment you are replying to states other OS' do not have this failure mode so your response is quite the non-sequitur, nevermind of questionable veracity (linux).