You are viewing a single thread.
View all comments View context
44 points
*

Sure, but they weren’t patching a windows vulnerability, windows software, or a security issue, they were updating their software.

I’m all for blaming Microsoft for shit, but “third party software update causes boot problem” isn’t exactly anything they caused or did.

You also missed that the same software is deployed on Mac and Linux hosts.

Hell, they specifically call out their redhat partnership: https://www.crowdstrike.com/partners/falcon-for-red-hat/

permalink
report
parent
reply
11 points

Crowdstrike completely screwed the pooch with this deploy but ideally, Windows wouldn’t get crashed by a bas 3rd party software update. Although, the crashes may be by design in a way. If you don’t want your machine running without the security software running, and if the security software is buggy and won’t start up, maybe the safest thing is to not start up?

permalink
report
parent
reply
18 points

Are we acting like Linux couldn’t have the same thing happen to it? There are plenty of things that can break boot.

permalink
report
parent
reply

CrowdStrike also supports Linux and if they fucked up a Windows patch, they could very well fuck up a linux one too. If they ever pushed a broken update on Linux endpoints, it could very well cause a kernel panic.

permalink
report
parent
reply
12 points

Yeah, it’s a crowd strike issue. The software is essentially a kernel module, and a borked kernel module will have a lot of opportunities to ruin stuff, regardless of the OS.

Ideally, you want your failure mode to be configurable, since things like hospitals would often rather a failure with the security system keep the medical record access available. :/. If they’re to the point of touching system files, you’re pretty close to “game over” for most security contexts unfortunately. Some fun things you can do with hardware encryption modules for some cases, but at that point you’re limiting damage more than preventing a breach.

Architecture wise, the windows hybrid kernel model is potentially more stable in the face of the “bad kernel module” sort of thing since a driver or module can fail without taking out the rest of the system. In practice… Not usually since your video card shiting the bed is gonna ruin your day regardless.

permalink
report
parent
reply
-1 points
Deleted by creator
permalink
report
parent
reply
4 points

How the fuck did my Fedora just bluescreen?? Crowdstrike!

*audience laughter, freeze-frame*

permalink
report
parent
reply
1 point

Are the Mac and Linux machines having BSOD (-style) issues and trouble booting?

permalink
report
parent
reply
20 points

No, because CrowdStrike didn’t bork the drivers for those systems. They could have, though.

permalink
report
parent
reply
7 points

Nope, because they only shipped a corrupted windows kernel module.

It’s dumb luck that whatever process resulted in them shipping a broken build didn’t impact the other platforms.

permalink
report
parent
reply
4 points

They’ve got Paid BSOD, I’ve got FreeBSD, we’re not the same.

permalink
report
parent
reply
1 point

isn’t XNU more decoupled than Windows kernel?

permalink
report
parent
reply

Programmer Humor

!programmer_humor@programming.dev

Create post

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

  • Keep content in english
  • No advertisements
  • Posts must be related to programming or programmer topics

Community stats

  • 5.2K

    Monthly active users

  • 1K

    Posts

  • 38K

    Comments