Live data from Hacker News

CrowdStrike Update: Windows Bluescreen and Boot Loops

old.reddit.com

781–790 of 1001 posts

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#782

what many people of not taking is that why we are here: one simple reason: all eggs in one Microsoft PC basket why in one Microsoft PC basket? - most corporate desktop apps are developed for Windows ONLY Why most corporate desktop apps are developed for Windows ONLY? - it is cheaper to develop and distribute since, 90% of corporations use Windows PCs ( Chicken and Egg problem) - alternate Mac Laptops are 3x more expe…

No less than three baskets, or you cannot apply for bailouts. If you want to argue your industry is a load-bearing element in the economy: no less than three baskets.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#783

what many people of not taking is that why we are here: one simple reason: all eggs in one Microsoft PC basket why in one Microsoft PC basket? - most corporate desktop apps are developed for Windows ONLY Why most corporate desktop apps are developed for Windows ONLY? - it is cheaper to develop and distribute since, 90% of corporations use Windows PCs ( Chicken and Egg problem) - alternate Mac Laptops are 3x more expe…

Windows is not the issue here. If all of the businesses used Linux, a similar software product, deployed as widely as Crowdstrike, with auto-update, could result in the same issue.

Same goes for the OS; if let's say majority of businesses used RHEL with auto updates, RedHat could in theory push an update, that would result bring down all machines.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#785
post #708

is there an ELI5 on how can this happen? Like i get its a boot loop, but what did crowdstrike do that cause it? How can non malicious code trigger boot loop?

What they did is that they forgot to write a graceful failure mode for their driver loader. (And what they did on top of it is to ship it without testing.)

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#786

what many people of not taking is that why we are here: one simple reason: all eggs in one Microsoft PC basket why in one Microsoft PC basket? - most corporate desktop apps are developed for Windows ONLY Why most corporate desktop apps are developed for Windows ONLY? - it is cheaper to develop and distribute since, 90% of corporations use Windows PCs ( Chicken and Egg problem) - alternate Mac Laptops are 3x more expe…

Making everything browser based doesn't help (unless you can walk across the room and touch the server). The web is all about creating fast-acting local dependency on the actions of far-away people who are not known or necessarily trusted by the user. Like crowdstrike, it's about remote control, and it's exactly that kind of dependency that caused this problem.

I love piling on Microsoft as much as the next guy, but this is bigger than that. It's a structural problem with how we (fail to) manage trust.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#788
This has all the hallmarks of a SSCA (Software Supply Chain Attack).

Either that or Crowdstrike is testing critical software meddling in ring zero so poorly, causing crashes and bootloops out in the wild on 100% of the deployments, that they need to get sued out of existence.

I hope for their sake its the former.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#789
Does anyone know how to proceed if I do not have administrator level access to the computer?

I do not have access to c:\windows\system32\drivers\crowdstrike folder to delete the corrupted .sys file

I was able to boot on recovery mode with network, after waiting 30 min, I rebooted and BSOD persisted.

Are there other alternatives on how to recover?

Post reply on HN