Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CrowdStrike Update: Windows Bluescreen and Boot Loops

old.reddit.com

Post reply on HN
Print view View original

331–340 of 1001 posts

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#331

Post by peanut-walrus »

openrisk wrote: post #196

The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…

I think the enterprise software ecosystem currently is not really "all eggs in one basket", but rather you have a whole bunch of baskets, some of them you are not even aware of, some are full of eggs, some have grenades in them instead, some are buckets instead. All baskets are being constantly bombarded with a barrage of eggs from unknown sources, sometimes the eggs explode for inexplicable reasons. Oh yeah and sometimes the baskets themselves disintegrate all at once for no apparent reason.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#332

Post by InsideOutSanta »

_8j50 wrote: post #301

Their stock price will suffer but they can waive license fees for a year or so for every endpoint affected (~$50). They better pin this on a rogue employee, but even then, force pushing updates shouldn't be in their capability at all! They must guarantee removal of that capability. Lawsuits should be interesting. They offer(ed?) $1 mil breach insurance to their customers, so if they were to pay only that much per cus…

> the single biggest security improvement

Clearly not, unless you don't count a world-wide economic and societal disruption of unprecedented scale a security incident.

> This could have been any security vendor

...that apparently deploys Kernel Extensions to millions of Windows devices at once, without any staggering.

> there is a reason why they are so widely used to begin with

Because companies need to check a box, and purchasing CrowdStrike checks that box.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#333

Post by roenxi »

openrisk wrote: post #196

The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…

The other aspect of risk management is an acceptance that something going wrong isn't necessarily a reason to change what you are doing. If the plan was tacitly to run something at a 99% uptime, then incidents causing 1% downtime can be ignored.

We are going to get hit by some terrible outage eventually (I hope someone is tracking things like what happens if a big war breaks out and the GPS constellations all go down together). But having 10x providers won't help against the big IT-related threats which are things like grid outages and suchlike having cascading effects into food supplies.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#335

Post by alibarber »

I have been told 'not to worry' because it isn't a cyber attack. Yet the outcomes we are seeing feel a lot like the doomsday predictions of what a cyberattack would do. It is almost as if we are experiencing the cybersecurity/warfare equivalent of 'friendly fire'.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#336

Post by elorant »

For years now antivirus solutions have ridiculous amount of control over the OS. I accidentally installed an adware antivirus the other day that was bundled-up with a third party software, and I had to boot to Linux to manage to completely remove the damn thing from Windows. The uninstall option left a process running that couldn’t be forcefully killed.

Microsoft needs to take control and forbid anyone and anything from running software with that kind of behavior.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#339

Post by NDizzle »

openrisk wrote: post #196

The details (the particular companies / systems etc) of this global incident don't really matter. When the entire society and economy are being digitized AND that digitisation is controlled and passes through a handful of choke points its an invitation to major disaster. It is risk management 101, never put all your digital eggs in one (or even a few) baskets. The love affair with oligopoly, cornered markets and powe…

While this is a great theory, how would you actually accomplish this with antivirus software?

Multiple machines, each one using different vendor software? What other software needs to be partitioned this way? What about combinations of this software?

I’m just barely awake but don’t know if I’m affected yet. One of my devs is, our client support staff is, and I have no idea how our servers are doing just yet.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#340

Post by doug_durham »

bgnn wrote: post #193

This is a manifestation of almost everything wrong about software development and marketing practices. I work in hardware development and such a failure is almost impossible to imagine. It has to work, always. It puzzles me why this isn't the casebfor software. My SWE colleagues often get mad at us HW guys because we want to see their test coverage for the firmware/drivers etc.. The focus is having something which co…

Complexity. As you get further from the driver and the kernel software complexity expands massively. It gets to a point where it is beyond the abilities of humans and processes to manage it in a cost effective manner.
Post reply on HN