So you're pro monopoly? What happens when Microsoft has sole command over those millions of computers and does the exact same mistake?
Welp.
Last edited:
Global BSOD
- Thread starter Dirk Diggler
- Start date
Welp.
Then MS would get the blame - in this case its the EU’s fault.
Yes, it's a great thing if private companies ignore the law!
Preventing the establishment of monopolies is a vital part of the state's role in maintaining functioning markets. The EU has been very strong on this, much to the benefit of everyone; they may not have got the detail of every decision but they've definitely had a positive impact overall.
In this case it's Crowdstrike's fault.
EDRs APIs shouldn't cause crashes, an Endpoint Detection and Response API should provide documented, safe, secure, ways of accessing low-level kernel functions, if a particular spin of Linux don't provide such a kernel that's their problem.
Unlike Apple and MS the Linux kernel is open source, that means anyone can write anything they want to interact with it in anyway they want, that why you don't grant programs root privileges unless you either trust it implicitly or know exactly what it's doing.
Last edited:
Claims like this need a lot more substance.
Good luck with that, i suspect you're asking someone for something they don't understand.
Which bit of MS’s assessment do you disagree with?
None because they didn't mention that they could've written an EDR API so there was a documented, safe, secure, ways of accessing low-level kernel functions needed for Endpoint Detection and Response. (vs what they seem to be implying they did and open up most, all of, the low level kernel functions)
MS's statement is a lie by omission.
Last edited:
Fine them.
Oh no! And when they just laugh?
You don't seem to have a very good grasp of how companies operate internationally.
You mean two distros of effectively the same OS, of which there are nearly 1000 different distros?... and yep it's broke it before but nobody noticed because the install base where it matters is like 10 machines globally... if Linux wasn't a complete cluster with a 1000 distros nobody asked for, people might actually use it.
Shakes fist at Linux for being, well, Linux
An ERD api sounds a solid route to deal with these sorts of things mind... the whole model with how crowdstrike works seems fundamentally flawed... I had actually queued up a meeting with them to have a look at this "best in breed" solution! I guess I'll probably give that one a miss.
Last edited:
It's what they did with Windows drivers. It used to be a free-for-all with third party drivers until MS wrote a secure, safe, way for drivers to interact with the kernel.
They should've written an API for EDR's but it seems they either didn't bother or the API is allowing EDR's to do something that brings down the OS.
Soldato
- Joined
- 23 Dec 2013
- Posts
- 3,549
- Location
- North Wales
Agreed, although it likely also did cause some destruction given the systems that it was running. Especially if it shut off any devices running any kind of database.Disruptive rather than destructive, but anyone interested in causing mass disruption would be looking at this and thinking, all we need to do is force PCs to recovery mode.
Imagine if this happened to all Windows PCs, not just those with CrowdStrike installed, the disruption would be far far worse
Last edited:
Maybe i'm misunderstanding something here but I thought linux as quite popular in the server space or has that changed?
Just end it there, no need for any more words.
It prevalent in the dc at scale but a lot of the dc's that I visit will be using custom distros or stuff they have built themselves. The big hyperscalrs will generally be rocking custom stuff. Also at a dc level you are running virtual on the metal and end points will be virtual. Generally on top of this you have access to the machine at boot via stuff like iLO and other management ports. What I'm saying is yes, but not in a way that would be affected by almost all, if not all EDR solutions.
Actually thinking about this there is an exception... darktrace, specifically the dark trace appliance which operates in the network stack and has the ability if configured correctly to block traffic. You would need their antigena product for it to do this... but as an ex darktrace customer I can assure you that none of these solutions are infalable.
Last edited:
Heres a more basic explanation of the EU’s culpability for those that struggled with the telegraph article.
www.macrumors.com
Microsoft Blames European Commission for Major Worldwide Outage
Last Friday, a major CrowdStrike outage impacted PCs running Microsoft Windows, causing worldwide issues affecting airlines, retailers, banks, hospitals, rail networks, and more. Computers were stuck in continuous recovery loops, rendering them unusable. The failure was caused by an update to...
www.macrumors.com
Last edited: