USA can no longer be trusted to supply import technology for the world.
CrowdStrike Update: Windows Bluescreen and Boot Loops
261–270 of 1001 posts
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#262[deleted]
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#263The biggest mistake here is running a global update on a Friday. Disrespect to every sysadmin worldwide.
Yeah, airlines prefer mid-week chaos & grounding.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#264Can someone explain what Crowdstrike actually is? Reading Wikipedia it seems to be some sort of anti-virus software?
Yes it’s rebranded antivirus for enterprise with new fancy name - “endpoint security”. Also has remote fleet management and firewall features
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#265The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…
> The details (the particular companies / systems etc) of this global incident don't really matter.
It definitively matters. The main issue he is that Crowdstrike was able to push and update on all server around the world where all their agent is installed ... it looks like an enormous botnet ...
We need a detailed post-mortem on what happened here.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#266Absolutely shameful display of how the cure can be worse than the disease. It's nonsense snake oil and security theater such as this that throws the cyber"security" industry into disrepute. One may as well have just installed McAfee Anti Virus.
>snake oil
So much software - especially in the 'operating system' sphere of things - really is just snake oil.
Its just, very functional oil, in many cases - and highly toxic and slippery in many, many other cases.
>cyber "security" industry
Yes, I agree this is a market of smoke and mirrors, lies and propaganda.
The reason is, operating systems are broken. Pretty much all of them. Only, some of them work well enough to get a lot of work done, most of the time. Of the 99.9995% of the time it works, its great.
But, here's a thing I feel needs broader attention and discussion - It is my firm opinion that "Operating Systems Vendors" are a very poor, ragged class of professionals these days.
The decisions made at Microsoft - and other OS vendor corporations - have really lost the plot.
I can prove this by asking the golden question among the general public, and categorically get a standard response: "does this feature benefit the user, or does it benefit an advertiser?"
"No, this all seems to be some sort of setup. Windows doesn't feel like its for us, any more."
I mean, how many 3rd-party vendors do I need, secretly installing crippling 'updates' in my production systems, before I realize that there is no security, so write better software that doesn't need all this utter junk.
I mean this sincerely, operating systems vendors are treasonous to the user if 3rd parties are of more relevance to production runtime, than the thing the user very definitely needs to be operating.
The cloud is for backups, encrypted. It is made of snake oil.
Always run your own machines.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#267Yet another good example why liability in software should already be a common thing.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#268This company has post-apocalyptic style photos to make you panic-buy their solution.
"62 minutes could bring your business down"
I guess they could bring all the businesses down much quicker.
edit: link https://www.crowdstrike.com/en-us/#teaser-79minutes-adversar...
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#269i've seen photos of the bsod from an affected machine, the error code is `PAGE_FAULT_IN_NONPAGED_AREA`. here's some helpful takeaways from this incident: 1) mistakes in kernel-level drivers can and will crash the entire os 2) do not write kernel-level drivers 3) do not write kernel-level drivers 4) do not write kernel-level drivers 5) if you really need a kernel-level driver, do not write it in a memory unsafe langua…
Not a helpful takeaway, I've yet to see a Java kernel driver.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#270The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…
Yet, catastrophic failures like this happen, and people move on. Sure, there is that one guy who spent 10 years building a 10-fold redundancy plan, and his service didn't go down when the whole planet went down, but do people really care?