Live data from Hacker News

A cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

theregister.com

11–20 of 23 posts

Re: A cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

#11
We went through the trouble years ago of ensuring all our important user data was not being stored on user machines. We then warned users whenever we noticed files being stored improperly that we would spend _zero_ effort recovering those files if their machine is lost, stolen or otherwise attacked by malware.

This made "nuke it from orbit" the default repair strategy for complicated machine issues.

I can't imagine having to putz around with BitLocker keys with zero infrastructure designed to actually use them in a disaster scenario let alone just a major inconvenience like this. I'm glad we never put ourselves in a position to have to do that.

Re: A cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

#12
post #8

Interesting idea, but keep in mind that older laser-based barcode readers don't work when reading from an LCD screen

Ive done a lot of work with barcodes, barcode scanners, and symbologies. Many of the cheap ones absolutely will. They just don’t utilize the tracking laser to get a reflection as the light from the screen is literally being shone into the sensor. The bars don’t have to be perfectly black, just dark enough from the “quiet” areas to have recognizable contrast.

Re: A cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

#13
post #2

saved you a click: they used barcode scanners to automate entering the bitlocker recovery code, which is different for each machine and is required during the removal process.

we have a pxe boot sccm task sequence that fixes it for you. :-P no barcode scanner needed.

Re: A cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

#15
I don't get why this works.

It obviously does, but how did we get to a place where a cheap barcode scanner hack is the best? How does going digital -> analogue -> digital makes sense?

Should there be a generic USB device with storage where we can send all types of inputs to a PC?

Previous - https://news.ycombinator.com/item?id=41073006 (27 comments)

Re: A cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

#19
Back in 2008, I used a receipt printer and a barcode scanner to bridge the gap in a paper based registration system for a college gym memberships. I set up a series of kiosk PCs that spit out a small receipt based on a web form that was filled out on the PC. Using a PHP script, it just separated data fields with embedded tabs in a QR code.

Once the membership was paid for, the admin would scan the receipt, making the membership live in under a second, by typing in that data in a web form on a different PC.

Why not have a direct linkage? Because in 2008 cash was still very popular, and we were working with legacy student ID system, so a direct linkage would have been difficult.

Before that change, students would fill out a paper form, and staff and students would type in all the data. It took months do to all 8000 memberships per semester, and most would be done around the halfway point of the semester. Madness.

Re: A cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

#20
post #2

saved you a click: they used barcode scanners to automate entering the bitlocker recovery code, which is different for each machine and is required during the removal process.

Keyboard wedge barcode readers have a long history in data entry in industrial settings. One of my current Customers uses the UPC on the finished goods they make to "program" the PLC on their production line with the parameters of the finished good. The barcode reader is just "typing" the UPC and various commands into a serial-to-Ethernet gateway that's ultimately connected to a TELNET server on a PC w/ PLC software…

There are doctors offices where you are supposed to present a confirmation or ID to a patient-facing barcode scanner at checkin. If you let it scan your code at the wrong time, at breaks the checkin flow. I can only assume that a mildly creative barcode could compromise all kinds of things.
Post reply on HN