[deleted]
Mass worldwide IT outage affects airlines, media and banks
21–26 of 26 posts
Re: Mass worldwide IT outage affects airlines, media and banks
#22Hmm, let's deploy this on friday, what could possibly go wrong?
I know it's a tired old meme, but it's still true. :)
Re: Mass worldwide IT outage affects airlines, media and banks
#23I always thought crowdstrike type software was a scary piece of software. It would make the perfect target for an attack. High privleged and used everywhere.
A wonderful target for a supply chain attack.
Re: Mass worldwide IT outage affects airlines, media and banks
#24I always thought crowdstrike type software was a scary piece of software. It would make the perfect target for an attack. High privleged and used everywhere.
All these endpoint protection solutions do complex things in the lowest levels of the OS and inside the kernel. Their MO is to inspect, intercept, block and/or modify calls made by other software on the system. We used to have a name for software like that in the 1990's. We called them rootkits.
But it checks a box somewhere so it has to be good. How can anyone run an IT infrastructure without buying a dozen "security" solutions in this day and age? Just designing your network with security in mind instead? Are you nuts?
Re: Mass worldwide IT outage affects airlines, media and banks
#25Outage resulted from a "security update".
Re: Mass worldwide IT outage affects airlines, media and banks
#26Earlier quoted context omitted.
All these endpoint protection solutions do complex things in the lowest levels of the OS and inside the kernel. Their MO is to inspect, intercept, block and/or modify calls made by other software on the system. We used to have a name for software like that in the 1990's. We called them rootkits.
But it checks a box somewhere so it has to be good. How can anyone run an IT infrastructure without buying a dozen "security" solutions in this day and age? Just designing your network with security in mind instead? Are you nuts?
There’s a non-trivial element behind all of this class of software, which is that humans are gonna human. Whether that’s a constant cat and mouse game in which your X number of employees are fodder who will inevitably click the wrong thing at the wrong time, or a zero-day laden worm that might be stoppable with enough eyeballs and some manner of heuristics that can automatically roll out some countermeasure.
Here on HN we generally understand technology well enough that most of us probably don’t need all these safeguards. James in accounting absolutely does, though.
There are a lot of “James in accounting”s out there, and a lot of them run or manage the companies that make the line of business software that everyone else relies on.
I’ve been studying the news coverage outside the tech sphere and the way people talk about this outage betrays exactly why software like this exists in the first place.