Why does "az --version" try to connect to "example.org"?

[jms1voalte]

This is autogenerated. Please review and update as needed.

Describe the bug

Command Name
az --version

Errors:

Attempts to connect to example.org port 443/tcp.

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

• Install "Little Snitch" or some other mechanism to observe outbound traffic.
• az --version

Expected Behavior

Software reports its version numbers without trying to connect to any outside servers.

Environment Summary

macOS-10.15.4-x86_64-i386-64bit
Python 3.8.2
Installer: HOMEBREW

azure-cli 2.5.1

Additional Context

[yungezz]

hi @arrownj could you pls have a look? thanks

[arrownj]

Hi @jms1voalte , CLI use it to check whether it can access the internet. We will consider change it to an official website in the future.

[yungezz]

Thanks for reporting the issue. To use the url is to just check network connectivity without real connection. Actually the url is configurable inside CLI code. Hope this clarifies. Would like to close the issue for now, feel free to open issue if any other ask. thanks.

[tkoestler]

Why was this closed? This should be pointed to an MS site. How do we know example.org is not collecting IP addresses to attack. This is a real security issue and should be fixed yesterday.