Ho do they test this before they roll it out? Looks like a bug thats easy to spot. I would presume they test it at several configurations and when it passes the test ( a reboot), they roll it out. Has this been tested?
CrowdStrike Update: Windows Bluescreen and Boot Loops
611–620 of 1001 posts
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#612CRWD dropped $50/share at market open. Wild.
Is this specific to only Windows machines “protected” with CS or is this impacting Linux/macOS as well?
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#613I can't wait to see the CloudFlare traffic report after this. All those computers going down must have affected traffic worldwide. Even from Linux systems as their owners couldn't run jobs from their bricked Windows laptops.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#614Next up: CrowdStrike Sued for Alleged Negligence.
I hate lawyers, but this is the reason why companies outsource. Why take the blame (and spend the money) when you can blame the vendor?
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#615Genuine question: How the heck crapeware like CloudStrike got into all critical systems from 911 to hospitals to airlines? My understanding was that all these critical systems are just super lazy to upgrade or install anything at all. I would love to know all the sales tactics CS used to get into millions of systems for money!
Reading other comments here, sorry I don't have the link, one crowd strike salesperson threatened to cancel them as a Client, yes you read that right, if the client wasn't easier to work with. So they're bullies or at least that one salesperson in crowd strike is a bully.
Another article talked about crowd strike being required for compliance, people here talking about checkbox compliance. So there's a systemic requirement from perhaps insurers for there to be some kind of comprehensive near real-time updated antivirus solution.
Furthermore, the haste makes waste philosophy seems to not be honored, in my opining mind, by the minds who drive The impacted sectors of our economy. Hospitals, Banks, airlines. This kind of vulnerability should not have been accepted. It's a single point of failure. Even on crowdstrike's website they have this kind of like radar ring hotspot Target kind of graphic, where they show at the very center one single client app .. theirs, as if that one single client is the thing that's going to save us?
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#616"Incidents of this nature do occur in a connected world that is reliant on technology."
- Mike Maddison, CEO, NCC Group
Until I see an explanation of how this got past testing, I will assume negligence. I wasn't directly affected, but it seems every single Windows machine running their software in my org was affected. With a hit rate that high I struggle to believe any testing was done.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#617So CrowdStrike is deployed as third party software into the critical path of mission critical systems and then left to update itself. It's easy to blame CrowdStrike but that seems too easy on both the orgs that do this but also the upstream forces that compel them to do it. My org which does mission critical healthcare just deployed ZScaler on every computer which is now in the critical path of every computer startin…
It’s even worse. The consultants who run the audits (usually business school recent grads) work with other consultants who shill the third party software and implementation work.
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#618From the BBC's cyber correspondent Joe Tidy [1]:
> A "content update" is how it was described. So, it wasn’t a major refresh of the cyber security software. It could have been something as innocuous as the changing of a font or logo on the software design.
He can't be serious, right? Right?
[1] https://www.bbc.co.uk/news/live/cnk4jdwp49et?post=asset%3Abd...
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#619Speaking of security. I got an email yesterday that I need a different system now to log into my social security account. This one:
It is for social security, taxes, unemployment benefits, whatever. And running under a foreign TLD, .ME for Montenegro. I am not a security specialist. But I think this is asking for trouble.
By the way, do you remember when fuck.yu became fuck.me ?
Re: CrowdStrike Update: Windows Bluescreen and Boot Loops
#620Chances if Microsoft or Crowdstrike will be held liable for financial losses caused by this outage?
Negligence at Crowdstrike is not covered by any SLA. Even if insured, Crowdstrike could be fucked. Let alone, companies going to try and how much cost this has. Long term, their fucked.