Can someone explain what Crowdstrike actually is? Reading Wikipedia it seems to be some sort of anti-virus software?
More like enterprise-level spyware
CrowdStrike Update: Windows Bluescreen and Boot Loops
231–240 of 1001 posts
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#232TBF although I worried about this possibility the first time the IT dude wandered into my office in 1989 holding a floppy he said he wanted to put into all the PCs we had (we had no PCs), it has actually taken a very long time for the shit to hit the fan.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#233All major US airlines have put in a total ground stop. No flights can take off anymore.
All airlines in Russia are operating as usual. Sanctions work in unpredictable ways
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#234I've picked the perfect day to return from vacation. Being greeted by thousands of users being mad at you and people asking for your head on a plate makes me reconsider my career choice. Here's to 12 hours of task force meetings...
"Gentlemen! You can't fight in here, this is the War Room!"
Have a nice day, anyway.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#235The only surprising thing is that this doesn't happen every month. Nobody understands their runtime environment. Most IT org's long ago "surrendered" control and understanding of it, and now even the "management" of it (I use the term loosely) is outsourced.
Nowadays it seems like everyone is running stuff inside VMs because IT removes all the rights in the host system.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#236The sheer coverage of this outage across multiple businesses and industries, the impact must be greater than some of the malicious cyber attacks from ransomware, worms etc.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#237This title doesn’t nearly describe the breadth and severity of the problem…
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#238The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…
[deleted]
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#239The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…
Centralisation vs decentralisation.
Cost-savings vs localisation of disaster.
It's a swinging pendulum of decisions. And developers know that software/hardware provision is a house of cards. The more levels of dependency, the more fragile the system is.
Absolutely horrible when lives will be lost, but determining the way our global systems are engineered and paid for will always be a moving target based on policy and incentive.
My heart goes out to life and death results of this. There are no perfect tech solutions.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#240Can someone explain what Crowdstrike actually is? Reading Wikipedia it seems to be some sort of anti-virus software?
CS is an EDR (Endpoint Detection & Response) and it connects to other parts like XDR (Extended Detection and Response) and MDM (Mobile Device Management). They differ from the typical antivirus in how they detect threats. The AV usually checks against known threats, while EDR detects endpoint behavior anomalies. For example, if your browser spawns a shell, it will be marked and the process quarantined. Of course, they do share a lot of common domains like real-time protection, cloud analysis, etc., and some AVs have most of the EDR capabilities, and some EDRs have most of the AV capabilities.
This is briefly described.