Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CrowdStrike Update: Windows Bluescreen and Boot Loops

old.reddit.com

Post reply on HN
Print view View original

581–590 of 1001 posts

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#581

Post by HTG43 »

JackC wrote: post #538

Crowdstrike did this to our production linux fleet back on April 19th, and I've been dying to rant about it. The short version was: we're a civic tech lab, so we have a bunch of different production websites made at different times on different infrastructure. We run Crowdstrike provided by our enterprise. Crowdstrike pushed an update on a Friday evening that was incompatible with up-to-date Debian stable. So we patc…

Interesting that they push updates on a Friday when support profile will be way different across companies and organizations during that time.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#582

Post by lenerdenator »

novaRom wrote: post #136

Chances if Microsoft or Crowdstrike will be held liable for financial losses caused by this outage?

Depends. I'm at an EMR maker; our Windows machines (as well of those of our clients - read: hospitals and doctors offices) are down. That is, of course, bad for the patients under their care.

Do these clients have SLAs? If so, they're definitely on the hook for something. You could probably get a few businesses together for a decent class-action against Crowdstrike. You're then expecting a lawyer to be able to convince a dozen semi-random people with varying degrees of computer knowledge that Crowdstrike's software was negligently designed, developed, and deployed in a way that caused financial or life losses for customers.

So, really, it's a coin flip.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#583

Post by sytelus »

Genuine question: How the heck crapeware like CloudStrike got into all critical systems from 911 to hospitals to airlines? My understanding was that all these critical systems are just super lazy to upgrade or install anything at all. I would love to know all the sales tactics CS used to get into millions of systems for money!

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#584

Post by CoastalCoder »

drooopy wrote: post #174

I've picked the perfect day to return from vacation. Being greeted by thousands of users being mad at you and people asking for your head on a plate makes me reconsider my career choice. Here's to 12 hours of task force meetings...

Maybe you picked the right week to start sniffing glue.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#585

Post by convivialdingo »

Here’s my take as a security software dev for 15 years.

We put too much code in kernel simply because it’s considered more elite than other software. It’s just dumb.

Also - if a driver is causing a crash MSFT should boot from the last known-good driver set so the install can be backed out later. Reboot loops are still the standard failure mode in driver development…

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#590

Post by radiator »

zmmmmm wrote: post #349

So CrowdStrike is deployed as third party software into the critical path of mission critical systems and then left to update itself. It's easy to blame CrowdStrike but that seems too easy on both the orgs that do this but also the upstream forces that compel them to do it. My org which does mission critical healthcare just deployed ZScaler on every computer which is now in the critical path of every computer startin…

Very sharp and to the point, this comment. I would like to add that in large companies the audit will, in my experience, very often examine documents only -- not actual configuration or code.
Post reply on HN