I guess you aren't protected from 4 lines of Python, though, huh?

import dns.resolver

resolver = dns.resolver.Resolver(configure=False)
resolver.nameservers = ['8.8.8.8']
ans = resolver.query('example.com', 'A')

They stop it cold . They'd 1st be able to cut it off running @ all, & secondly, tunneled or not, I'd imagine it travels over IP (TCP or UDP) anyway, or by port, & could easily be stalled... so could communique w/ its rogue DNS + C&C's...

You seem confused. So are you saying the hosts file would block the DNS request from that Python snippet?

Heck - Even Windows' native firewall would (does when it doesn't recognize an application & warns you about them - & only a FOOL would let something run they didn't know)... get it? Good.

Oh, now you're saying the windows firewall would block it. So hosts would not.

I'm actually MORE like "The LORD of Hosts" https://answers.yahoo.com/ques... [yahoo.com] with rank after rank of protective power I can summon @ a word: Hosts!

I guess you aren't protected from 4 lines of Python, though, huh?

import dns.resolver

resolver = dns.resolver.Resolver(configure=False)
resolver.nameservers = ['8.8.8.8']
ans = resolver.query('example.com', 'A')

Thanks for the Windows IT Pro link - it's hilarious! That will make for some great shitter reading later.

I don't actually see a debate with Russinovich, though. He wrote an article, and you left comments. I don't think he's aware you exist.

Your apps aren't being used. It's difficult to even find a current download for your garbage while a professional like Dr. Russinovich has a website of his own: http://www.sysinternals.com/

Oh, you think you schooled the guy who started sysinternals.com? Bahahahhahaa

In my college Earth Science classes, our professor taught us that there is no doubt the Earth is slowly warming. The only argument is over whether it's natural or due to mankind's effects on the environment.

I should have told him that mi, Slashdot's resident political scientist/economist/earth scientist has it all figured out, and that's not true.

I don't see any discussion at that link, just more verbal diarrhea. Where is Russinovich?

Haha, real DNS servers don't check /etc/hosts.

Also, looked like that VP told you "Slashdot anonymous posts are most definitely not the proper channels."

I've apparently smoked your OpenDNS folks too via application based firewalls [...] Not a 1st for me... I've done in the likes of folks from MS (VP of their Windows Client Performance Division, Dr. Mark Russinovich, & others of that ilk...

Yeah, I'm sure you schooled a PhD in an argument, and understand security better than OpenDNS.

facepalm