I suspect after all the computers affected are finally fixed (each manually), and the Congressional hearings have been held, and assuming their stock value doesn’t completely crater, I think they may reevaluate their update frequency and strategy.
6 Likes
My company uses Crowdstrike, and this happened at 14:30 in Japan, so we had Zoom meetings where the people on PCs just disappeared, leaving only the Macs behind.
It was like a scene from The Leftovers.
12 Likes
If one is interested in cybersecurity, Patrick’s podcast at risky.biz is worth checking out…
2 Likes
Any plausible excuse to get out of a Zoom conference…
10 Likes
12 Likes
9 Likes
Whoaaa… talk about leadership setting the pace.
9 Likes
Failing upwards. A rich white male specialty!
6 Likes
Okay, i missed this entire discussion as i was out all day but you’re telling me this wasn’t one of Microsoft’s borked updates causing the ruckus?
2 Likes
Well, that didn’t take long.
12 Likes
Honestly, “crowdstrike” is only like a 6/10 threat actor name; but I have to award extra credit for what appears to be the largest denial of service attack in history. We’ll call it a 7-/10, passing grade.
1 Like
This is actually not a bad summary.
And I just saw another breakdown which says that the update .sys which caused all this wasn’t “slightly malformed” or “faulty code”, it’s null. As in, it’s however many kB of nothing but 0x00 over and over and over. Yeah, that’s an oopsie.
3 Likes
1 Like
… caption refers to
3 Likes
3 Likes
CrowdStrike fixes start at “reboot up to 15 times” and get more complex from there
The gormless question i have (searched vaguely for and haven’t yet found the answer to) is what changes in the system between, oh say, the 12th and 14th attempt, that the 15th is ‘bob’s yer uncle’?? it’s a totally corrupt (nulled out according to @catsidhe) kernel driver file, how does more than 14 @#$ reboots, but not the first, turn the trick? and is 15 somehow an average? some get ‘lucky’ at 11? others with less karma must go 23? (“Well they say ‘up to 15 times’ so that must mean you’re assured you won’t have to go to 16…?” ah.)
Thanks to @sqlrob ! for the only sane answer i’ve seen so far.
2 Likes
One explanation I’ve seen, but not seen whether or not it’s accurate, is that there’s a chance the update will be downloaded before the crash. It’s a race condition, so it’s going to be unspecific.
4 Likes
15 Likes
And the crowd are loving it!
1 Like
