Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CrowdStrike Update: Windows Bluescreen and Boot Loops

old.reddit.com

Post reply on HN
Print view View original

901–910 of 1001 posts

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#901

Post by p_l »

techbrovanguard wrote: post #143

i've seen photos of the bsod from an affected machine, the error code is `PAGE_FAULT_IN_NONPAGED_AREA`. here's some helpful takeaways from this incident: 1) mistakes in kernel-level drivers can and will crash the entire os 2) do not write kernel-level drivers 3) do not write kernel-level drivers 4) do not write kernel-level drivers 5) if you really need a kernel-level driver, do not write it in a memory unsafe langua…

Rust's memory safety does not prevent category errors like using nonpaged memory for things supposed to be paged and vice versa

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#902

Post by pseudopersonal »

1024core wrote: post #716

Read on Mastodon: https://infosec.exchange/@littlealex/112813425122476301 The CEO of Crowdstrike, George Kurtz, was the CTO of McAfee back in 2010 when it sent out a bad update and caused similar issues worldwide. If at first you don't succeed, .... ;-) j/k

Yet another successful loser who somehow continues to ascend corporate ranks despite poor company performance. Just shows how disconnected job performance is from C-suite peer reviews, a glorified popularity contest. Should add the unity and better.com folk here

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#903

Post by hughesjj »

JackC wrote: post #538

Crowdstrike did this to our production linux fleet back on April 19th, and I've been dying to rant about it. The short version was: we're a civic tech lab, so we have a bunch of different production websites made at different times on different infrastructure. We run Crowdstrike provided by our enterprise. Crowdstrike pushed an update on a Friday evening that was incompatible with up-to-date Debian stable. So we patc…

> we push software to your machines any time we want, whether or not it's urgent, without testing it

... Just, no... HOW does a vendor get away with that? No rolling releases allowed? No hostclasses or placement groups? No local cache or proxy?

The more I've learned over the past day or so, the more crowdstrike keeps edging towards the malware side of the malware/anti-malware spectrum for me

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#905

Post by TexanFeller »

A heuristic that has served me well for years is that anyone who uses the word “cybersecurity” is likely incompetent and should be treated with suspicion.

My first encounter with CrowdStrike was overwhelmingly negative. I was wondering why for the last couple weeks my laptop slowed to a crawl for 1-4 hours on most days. In the process list I eventually found CrowdStrike using massive amounts of disk i/o, enough to double my compile times even with a nice SSD. Then they started installing it on servers in prod, I guess because our cloud bill wasn’t high enough.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#906

Post by Laforet »

TexanFeller wrote: post #905

A heuristic that has served me well for years is that anyone who uses the word “cybersecurity” is likely incompetent and should be treated with suspicion. My first encounter with CrowdStrike was overwhelmingly negative. I was wondering why for the last couple weeks my laptop slowed to a crawl for 1-4 hours on most days. In the process list I eventually found CrowdStrike using massive amounts of disk i/o, enough to do…

Cyber- is pretty much a code prefix for anything targeted at the public sector. I too see it as a kind of dirty word TBH.

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#908

Post by troad »

sys32768 wrote: post #893

SMB here. Just spent a nine hour day fixing this. We had two machines that after a couple of reboots just came back up fine. We were trialing CrowdStrike and about to purchase next week. If their rep doesn't offer us at least half off, we are going with Sentinel One which was half the price of CS already. The incompetence that allowed this is baffling to me. I assumed with their billions of dollars they'd have tiers…

> We were trialing CrowdStrike and about to purchase next week. If their rep doesn't offer us at least half off, we are going with Sentinel One which was half the price of CS already.

You’re still considering them after all this?

Re: CrowdStrike Update: Windows Bluescreen and Boot Loops

#909

Post by akira2501 »

tbatchelli wrote: post #665

This event is predicted in Sydney Dekker’s book “Drift into Failure”, which basically postulates that in order to prevent local failure we setup failure prevention systems that increase the complexity beyond our ability to handle, and introduce systemic failures that are global. It’s a sobering book to read if you ever thought we could make systems fault tolerant.

> we setup failure prevention systems

You can't prevent failure. You can only mitigate the impact. Biology has pretty good answers as to how to achieve this without having to increase complexity as a result, in fact, it often shows that simpler systems increase resilliency.

Something we used to understand until OS vendors became publicly traded companies and "important to national security" somehow.

Post reply on HN