Global BSOD

[Freakbro]

Only just heard about this lol, have I missed the apocalypse?

 

[visibleman]

It was mentioned on radio earlier that some techs were advising up to 15 reboots to get the update

I think Microsoft is recommending the same
Saying that, you only need the network stack to stay up long enough for the update (CrowdStrike push it out hours ago) to download.

 

[MCFC_ANDY]

"Oh dear, oh dear"

im watching the practices, hilarious they have crowdstrike logo on shirts and cars etc. i would have blanked it off

 

[Kelt]

Contractually obliged to wear them, I'm guessing.

 

[Grim5]

I saw a headline earlier saying 'Microsoft has a lot to answer for'. With relatively little experience of these things, is this true? As it was a third party companies update? I've had a friend say yes due to certain 3 letter requirements and regulations.

I think investors are smart enough to know who's to blame - Microsoft's shares are only down 0.5% so far today while Crowdstrike has fallen 20% at one stage

 

[radderfire]

Crowdstrike must be really poor at testing releases for this to happen.

 

[radderfire]

It's also ironic that this was caused by a cybersecurity firm that is supposed to prevent such outages.

 

[dowie]

LOL

https://twitter.com/i/web/status/1814264306445246728

This is yet another reminder of why you should just get a MacBook for work

https://twitter.com/i/web/status/1814243677856022880

 

[Kelt]

Wonder if Crowdstrike will be liable to pay damages to affected companies.

 

[dowie]

Wonder if Crowdstrike will be liable to pay damages to affected companies.

They'd have a very negligent legal department if they didn't try to cover issues arising from software defects in their contracts. Then again IANAL so maybe there is some angle whereby this was so bad/so incompetent of them that it's beyond reasonable and some clients successfully push for a settlement?

I'd assume though given the scale of the issue then if that were a possibility then it could maybe bankrupt them - presumably, it's more likely that doesn't happen (or indeed it isn't proved in).

 

[Destination]

An anti virus company will be making 100s of releases a month - current products, previous products and the fact that the anti virus business is very dynamic considering its prey. The number of configurations for Windows software is insane - I have no doubts that this would have been thoroughly tested but you can't have 100% coverage for the millions (billions?!) of configurations for MS platforms - the hardware, the software, the different versions, the different drivers / applications on that machine. Will be really interesting to know what the actually problem was (if we'll ever be told) but bugs like this are constantly released into the wild. It's just this time it caused BSOD.

What the problem not a driver file in the system directory, that falcon pushed to all computers, and BSODed them? Deleting said file, fixes the issue?

 

[CGrieves]

Wonder if Crowdstrike will be liable to pay damages to affected companies.

I've heard there is evidence they bypassed quality control. Which could mean wilful negligence, which would be messy for them. It's a shame because Crowdstrike is a great tool in my view.

 

[Mr Jack]

This is going to be an epic lawsuit

 

[CGrieves]

This is going to be an epic lawsuit

I can neither confirm nor deny that my employer is lawyering-up. We use CS globally (50k+ seats). It's been a catastrophe for us.

 

[Moley]

This is going to be an epic lawsuit

The EULA will give them legal cover.

 

[Moley]

I can neither conform nor deny that my employer is lawyering-up. We use CS globally (50k+ seats). It's been a catastrophe for us.

Good luck with that.

From the Crowdstrike EULA, that your company agreed to:

"Your sole and exclusive remedy and the entire liability of CrowdStrike for its breach of this warranty will be for CrowdStrike, at its own expense to do at least one of the following: (a) use commercially reasonable efforts to provide a work-around or correct such Error; or (b) terminate your license to access and use the applicable non-conforming Product and refund the prepaid fee prorated for the unused period of the Subscription/Order Term. CrowdStrike shall have no obligation regarding Errors reported after the applicable Subscription/Order Term."

 

[jpaul]

Question is still why the likes of the NHS, or their cloud provider, are updating without clean room testing - let's see the list of hi-tech companies that weren't impacted , like ours.

 

[Terminal_Boy]

Crowdstrike must be really poor at testing releases for this to happen.

Testing? That’s what the customers are for!

 

[Mr Jack]

The EULA will give them legal cover.

It may, but that'll be for the courts to decide. Plenty of contract clauses have been struck down in court before.

 

[cainer]

The EULA will give them legal cover.