HP spent years trying to recognize every dangerous file. Then it bought a company built on a stranger premise: let the file run - just give it nowhere dangerous to go.