CrowdStrike Update: Windows Bluescreen and Boot Loops • Hacker News Board

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#271

Post by kmlx » Fri, Jul 19, 2024, 8:57 AM UTC

tloriato wrote: post #79

GLOBAL OUTAGES - Major banks, media and airlines affected by major IT outage - Significant disruption to some Microsoft services - 911 services disrupted in several US states - Services at London Stock Exchange disrupted - Sky News is off air - Flights in Berlin grounded - Reports the issue relates to problem at global cybersecurity firm Crowdstrike

> - Services at London Stock Exchange disrupted

just their news service.

> The London Stock Exchange says it's working as normal - but says there are problems with its RNS (regulatory news service).

> "RNS news service is currently experiencing a third party global technical issue, preventing news from being published on www.londonstockexchange.com," the statement says.

> "Technical teams are working to restore the service. Other services across the group, including London Stock Exchange, continue to operate as normal."

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#272

Post by Jyaif » Fri, Jul 19, 2024, 8:57 AM UTC

My employers pays Crowdstrike to double my build times. Quite astounding really.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#273

Post by nyx_land » Fri, Jul 19, 2024, 8:58 AM UTC

openrisk wrote: post #196

The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…

this isn't even the first time something like this has happened. it's literally a running joke in programmer circles that AWS East going down will take down half the internet, and yet there's absolutely zero initiative being taken by anyone who makes these sorts of decisions to maybe not have every major service on the internet be put into the same handful of points of failure. nothing will change, no one will learn anything, and this will happen again.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#274

Post by entuno » Fri, Jul 19, 2024, 8:59 AM UTC

pulkitsh1234 wrote: post #209

Workaround steps: https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/commen...

There's potentially a huge issue here for people using BitLocker with on-prem AD, because they'll need the BitLocker recovery keys for each endpoint to go in an fix it.

And if all those recovery keys are stored in AD (as they usually are), and the Domain Controllers all had Crowdstrike on them...

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#275

Post by higeorge13 » Fri, Jul 19, 2024, 8:59 AM UTC

openrisk wrote: post #196

The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…

Or perhaps it's just because companies release features, planes, devices, etc. without any form of QA, aiming just to increase their profits?

In this case, has CS done any QA on this release? Have they tested it for months on all the variations of the devices that they claim to support? It seems not.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#276

Post by guenthert » Fri, Jul 19, 2024, 8:59 AM UTC

afaiu google (and I presume other operators of large number of computers) deploy updates to their software first to a small set of nodes and only if after a given time the update has been deemed successful, continue to update an increasingly larger set til complete.

Isn't this done as well with automatic updates of end user software or embedded systems and if not, why not?

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#277

Post by ivxvm » Fri, Jul 19, 2024, 8:59 AM UTC

Things like hospitals, airlines, 911, should have multiple systems with different software stacks and independent backends running in-parallel, so that when one infra goes down they can switch to another.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#278

Post by lucasRW » Fri, Jul 19, 2024, 8:59 AM UTC

Good day for OSINTers, APTs, redteamers, to find out who uses Crowdstrike on their endpoints.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#279

Post by gnuser » Fri, Jul 19, 2024, 9:00 AM UTC

dumb techbro c-suites: what, why would you have an issue with a proprietary closed source app that frequently self updates and sends tons of data to a third party while essentially being a backdoor? We said we wanted security and this has Security(tm) all over the literature! Look we even have dashboards for the gui-ninjas like the security team!

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#280

Post by topspin » Fri, Jul 19, 2024, 9:00 AM UTC

solidninja wrote: post #242

Ah the "move fast and break things" philosophy gets a demonstration.

That's misplaced. Windows is an ancient platform. CrowdStrike is ubiquitous and routinely updated. There was no "move fast" here, at least on the part of the people operating these systems.