this post was submitted on 19 Jul 2024
57 points (95.2% liked)

Technology

1750 readers
1195 users here now

Which posts fit here?

Anything that is at least tangentially connected to the technology, social media platforms, informational technologies and tech policy.


Rules

1. English onlyTitle and associated content has to be in English.
2. Use original linkPost URL should be the original link to the article (even if paywalled) and archived copies left in the body. It allows avoiding duplicate posts when cross-posting.
3. Respectful communicationAll communication has to be respectful of differing opinions, viewpoints, and experiences.
4. InclusivityEveryone is welcome here regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
5. Ad hominem attacksAny kind of personal attacks are expressly forbidden. If you can't argue your position without attacking a person's character, you already lost the argument.
6. Off-topic tangentsStay on topic. Keep it relevant.
7. Instance rules may applyIf something is not covered by community rules, but are against lemmy.zip instance rules, they will be enforced.


Companion communities

[email protected]
[email protected]


Icon attribution | Banner attribution


If someone is interested in moderating this community, message @[email protected].

founded 1 year ago
MODERATORS
 

The issues have been linked to a CrowdStrike update.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] -3 points 6 months ago (4 children)

And what will happen once it's resolved? Oh, a fine that can be written off? Sure, no problem. Just took out a few countries, governments, agencies and businesses worldwide, but don't do it again ๐Ÿ˜‰ Come contract renewal, you can increase the prices to pay off the fine and we'll diligently sign it ๐Ÿ˜˜

Anti Commercial-AI license

[โ€“] LwL 5 points 6 months ago* (last edited 6 months ago) (2 children)

Are you implying they should somehow have perfect quality control? Generally the lost customer trust is enough of an incentive to not let things like this happen. Things slip through QA, and the only way to prevent that at least 99.99% of the time is to invest MASSIVE amounts of money that really aren't justified for everything. Aviation does this, because there is significant risk of death if something goes wrong, so regulations force them to. Other industries arguably should (car manufacturers...), but a random security software? No.

[โ€“] mkwt 6 points 6 months ago

Car manufacturers have ISO 26262 to regulate safety critical software development, whereas aviation is mainly based on RTCA DO178.

The concepts are pretty similar. Details differ.

[โ€“] [email protected] 0 points 6 months ago (1 children)

Nothing is perfect, nothing is absolute, and yes that's an oxymoron but you get the point. Anyway, there are ways to minimize risk

  • A/B testing
  • gradual roll out
  • monitored roll out
  • rollback

And not only on the side of Crowdstrike, there are things that can be done by their customers:

  • OS rollback from weekly or monthly snapshots of the boot drive or system drive (probably shouldn't change that often)
  • if that isn't possible with that OS, use another OS
  • automated deployment (again, probably possible to fallback to a last known good deployment)
  • investment in sysadmins
  • investment in security staff

Probably lots more, but I'm not a sysadmin. I bet you though, that the hospitals, rail, and other governmental institutions simply don't have enough money to invest in that because of budget cuts and austerity measures. Some hospitals still have Windows XP running.

Companies and governments don't think IT and security are important until they are. It's not about creating a perfect system, it's about creating a system that can bounce back quickly.

Anti Commercial-AI license

[โ€“] [email protected] 2 points 6 months ago

Yeah, this absolutely smells like a corporate culture issue, not a one off glitch in QC. Fuckups of this magnitude shouldn't be possible without multiple failsafes breaking and people ignoring protocol. Not to say that "perfect storm" events don't ever happen, but it seems like the less-likely possibility to me.

load more comments (1 replies)