this post was submitted on 19 Jul 2024
169 points (96.7% liked)

Technology

57918 readers
7061 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

https://web.archive.org/web/20240719155854/https://www.wired.com/story/crowdstrike-outage-update-windows/

"CrowdStrike is far from the only security firm to trigger Windows crashes with a driver update. Updates to Kaspersky and even Windows’ own built-in antivirus software Windows Defender have caused similar Blue Screen of Death crashes in years past."

"'People may now demand changes in this operating model,' says Jake Williams, vice president of research and development at the cybersecurity consultancy Hunter Strategy. 'For better or worse, CrowdStrike has just shown why pushing updates without IT intervention is unsustainable.'"

top 25 comments
sorted by: hot top controversial new old
[–] [email protected] 39 points 1 month ago (2 children)

How did the update get through testing, if the bug has an immediately obvious catastrophic effect?

[–] [email protected] 35 points 1 month ago (1 children)

Agreed, this seems like a pretty obvious failed smoke test.

Three options seem likely to me: the build was untested, the final package got corrupted after testing, the test environment has some kind of abberant config that hid the defect.

[–] [email protected] 16 points 1 month ago

Kernel drivers are "reviewed" and signed by Microsoft for exactly this reason. It's a security risk if any program an administrator runs could load malicious kernel drivers into windows

[–] [email protected] 4 points 1 month ago (1 children)

Something I have heard (take with a grain of salt) is that there was a new windows update that went out just before the crowdstrike update. And the issue happened with the new windows update.

[–] EncryptKeeper 7 points 1 month ago

Not the case. I have dozens of servers last updated in May that crashed.

[–] [email protected] 24 points 1 month ago (1 children)

Pretty good test to see how easy it would be to shut the world down. Uninstall CrowdStrike.

[–] [email protected] 14 points 1 month ago* (last edited 1 month ago) (2 children)

I'm sure Russia is taking note. Its computers were unaffected due to having no Crowdstrike installations. China too, apparently.

[–] [email protected] 4 points 1 month ago

I’m sure they have their own solution for that, but yes, it would be unwise for a government to install software maintained by a foreign country. Kind of like voting booths.

[–] [email protected] 1 points 1 month ago

China and Russia are switching to Linux, too.

[–] [email protected] 24 points 1 month ago

Read-only friday, right? Right...?
Poor sysadmins.

[–] MeekerThanBeaker 5 points 1 month ago (1 children)

And this happens the same week that Kaspersky left the U.S.

They are laughing internally right now.

[–] [email protected] 11 points 1 month ago (1 children)

Kaspersky has caused BSODs because of updates in the past as well. Hardly an AV maker hasn't. The problem here is that Crowd Strike has captured the enterprise market in a large portion of the globe.

[–] MeekerThanBeaker 1 points 1 month ago

Oh I'm well aware. I hated deploying Kaspersky. But we switched to Crowdstrike last year and now this happened. Just a funny coincidence.

Luckily, we're a small company and a third use Macs. The others, well, I had three PC laptop and one virtual server issues. Not too bad. We're on the West Coast so glad I was aware of it last night when Australia got issues.

[–] paraphrand 1 points 1 month ago

Every time our IT tells PC users to just leave their computer on for X hours so it gets updates, I wonder how that can be a great system.