Why are "security" patches not tested before they are deployed?
CrowdStrike Update: Windows Bluescreen and Boot Loops
571–580 of 1001 posts
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#572So CrowdStrike is deployed as third party software into the critical path of mission critical systems and then left to update itself. It's easy to blame CrowdStrike but that seems too easy on both the orgs that do this but also the upstream forces that compel them to do it. My org which does mission critical healthcare just deployed ZScaler on every computer which is now in the critical path of every computer startin…
It's easy to blame CrodStrike because they're the ones to blame here. They lit a billion system32 folders on fire with an untested product and push out fear mongering corny marketing material. Turns out you should be afraid.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#573Yet Lennart Pottering and Redhat (spelled that way as I am one of the original pre-IPO investor of RedHat via Alex Brown/Deutsche Bank) wants to put networking of Linux into UEFI this quarter, inside the most sacrosanct PID 1.
They still won’t learning anything from Crowdstrike’s mistakeS!
Maybe it is time for me to ditch that stock.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#574Ironic that the software intended to prevent exactly these kinds of outages ends up causing it.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#575Some Canonical guy I think many years ago mentioned this as their sales strategy a few year ago after a particularly nasty Windows outage: We don't ask customers to switch all systems from Windows to Ubuntu, but to consider moving maybe a third to Ubuntu so they won't sit completely helpless next time Windows fail spectacularly. While I see more and more Ubuntu systems, and recently have even spotted Landscape in the…
Still haven't forgiven Ubuntu for pushing a bad kernel of their own that caused a boot loop if you used containers...
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#576This should at the very least put them out of business by causing each and every client to abandon them as their security solution.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#577Yet Lennart Pottering and Redhat (spelled that way as I am one of the original pre-IPO investor of RedHat via Alex Brown/Deutsche Bank) wants to put networking of Linux into UEFI this quarter, inside the most sacrosanct PID 1. They still won’t learning anything from Crowdstrike’s mistakeS! Maybe it is time for me to ditch that stock.
Source of claim?
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#578So CrowdStrike is deployed as third party software into the critical path of mission critical systems and then left to update itself. It's easy to blame CrowdStrike but that seems too easy on both the orgs that do this but also the upstream forces that compel them to do it. My org which does mission critical healthcare just deployed ZScaler on every computer which is now in the critical path of every computer startin…
> Orgs are doing this because they are more scared of failing an audit than they are of the consequences failure of the underlying systems the audits are supposed to be protecting.
If a failed audit is the big scary monster in their closet, then it sounds like the senior leadership is not intimately familiar with the technology and software in general, and is unable to properly weigh the risks of their decisions.
More and more companies are becoming software companies whether they like it or not. The software is essential to the product. And just like you would never want a non-lawyer running your law firm, you don't want a non-software person running your software company.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#579So CrowdStrike is deployed as third party software into the critical path of mission critical systems and then left to update itself. It's easy to blame CrowdStrike but that seems too easy on both the orgs that do this but also the upstream forces that compel them to do it. My org which does mission critical healthcare just deployed ZScaler on every computer which is now in the critical path of every computer startin…
> So CrowdStrike is deployed as third party software into the critical path of mission critical systems and then left to update itself.
TIL that US government has pressured foreign nations to install a mystery blob in the kernel of machines that run critical software "for compliance".
If this wasn't a providential goof on the part of Crowdstrike -- the entire planet is now aware of this little known fact -- then some helpful soul in Crowdstrike has given us a heads-up.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#580So CrowdStrike is deployed as third party software into the critical path of mission critical systems and then left to update itself. It's easy to blame CrowdStrike but that seems too easy on both the orgs that do this but also the upstream forces that compel them to do it. My org which does mission critical healthcare just deployed ZScaler on every computer which is now in the critical path of every computer startin…
No doubt there will be another piece of software mandated to check up on the compliance software. When that causes a global IT outage, software that checks up on the software that checks up on the compliance software will be mandated.