-
Starting today August 7th, 2024, in order to post in the Married Couples, Courting Couples, or Singles forums, you will not be allowed to post if you have your Marital status designated as private. Announcements will be made in the respective forums as well but please note that if yours is currently listed as Private, you will need to submit a ticket in the Support Area to have yours changed.
Crowdstrike Bug Shuts Down… Basically Everything
- Thread starter iluvatar5150
- Start date
- Sep 4, 2005
- 28,318
- 17,072
- Country
- United States
- Gender
- Male
- Faith
- Atheist
- Marital Status
- Single
- Politics
- US-Others
Is this that meme of the guy pointing to his head and saying
"you can't get a virus,
if your computer won't boot up"
I'm sure someone probably has already made that one today...they had to have lol
Upvote
0
- Aug 3, 2012
- 29,607
- 29,330
- Country
- United States
- Faith
- Christian
- Marital Status
- Married
- Politics
- US-Democrat
Upvote
0
- Sep 4, 2005
- 28,318
- 17,072
- Country
- United States
- Gender
- Male
- Faith
- Atheist
- Marital Status
- Single
- Politics
- US-Others
Anyway, as of 3:45 EST, our internal operations are back up and good to go, as are all of our clients except for 2 (their recovery has the extra wrinkle of them using BitLocker)
Upvote
0
essentialsaltes
Fact-Based Lifeform
- Oct 17, 2011
- 42,625
- 45,747
- Country
- United States
- Faith
- Atheist
- Marital Status
- Legal Union (Other)
Upvote
0
Boooo on Bitlocker. It has its place, but not on my system. Bitlocker bricked one of my laptops...actually locked up the BIOS.
Upvote
0
Laodicean60
Well-Known Member
- Jul 2, 2023
- 5,112
- 2,469
- 65
- Country
- United States
- Gender
- Male
- Faith
- Christian
- Marital Status
- Married
- Politics
- US-Others
I don't either but I didn't realize how big Crowdstrike is, isn't it a fairly new company?
Upvote
0
RocksInMyHead
God is innocent; Noah built on a floodplain!
- May 12, 2011
- 9,203
- 9,958
- Country
- United States
- Faith
- Catholic
- Marital Status
- Single
- Politics
- US-Democrat
Upvote
0
Laodicean60
Well-Known Member
- Jul 2, 2023
- 5,112
- 2,469
- 65
- Country
- United States
- Gender
- Male
- Faith
- Christian
- Marital Status
- Married
- Politics
- US-Others
Upvote
0
- Oct 2, 2020
- 28,232
- 15,314
- Country
- United States
- Gender
- Male
- Faith
- Christian
- Marital Status
- Single
Upvote
0
- Aug 3, 2012
- 29,607
- 29,330
- Country
- United States
- Faith
- Christian
- Marital Status
- Married
- Politics
- US-Democrat
Upvote
0
- Sep 4, 2005
- 28,318
- 17,072
- Country
- United States
- Gender
- Male
- Faith
- Atheist
- Marital Status
- Single
- Politics
- US-Others
They've been around for over a decade at this point...but yes, their global footprint is pretty massive (as we all witnessed yesterday, by hospital systems, airlines, and banking institutions all over the world getting negatively impacted)
Upvote
0
pgp_protector
Noted strange person
- Dec 17, 2003
- 51,891
- 17,793
- 57
- Gender
- Male
- Faith
- Christian
- Marital Status
- Widowed
- Politics
- US-Others
Thankfully our company doesn't use CrowdStrike 
But there were at least 3 failures on this
1) The Developer with the bad patch (happens to all of us)
2) The Reviewer who approved the Merge Request into master (They are doing software reviews before releasing right? )
3) QA who released the patch.
But there were at least 3 failures on this
1) The Developer with the bad patch (happens to all of us)
2) The Reviewer who approved the Merge Request into master (They are doing software reviews before releasing right? )
3) QA who released the patch.
Upvote
0
I don't think any of those were the problem, as I understand it. The software did precisely what it was designed to do: It discovered a vulnerability or change in Microsoft's kernel, was unable to fix it, so it shut the system down as designed.Thankfully our company doesn't use CrowdStrike
But there were at least 3 failures on this
1) The Developer with the bad patch (happens to all of us)
2) The Reviewer who approved the Merge Request into master (They are doing software reviews before releasing right? )
3) QA who released the patch.
The problem was that it was Microsoft's own change to their kernel that the software didn't know about.
Back when I owned a farm of 60 test servers and 50 production for a Fortune 50 company, it was my job on "Microsoft Tuesday" to run the Microsoft updates on my test servers (they ran various different production applications) to make sure the Microsoft update didn't break any of the company applications or server functions. The company policy was that every Microsoft update would be applied by that next Tuesday, so my response could never be "don't run the update," my response had be, "Hey, devs, these are the applications this update will break...I hope you've got plenty of Mountain Dew!"
Well, that applied to me, too, because whatever patches the devs developed, I still needed to test them in my test farm against the Microsoft update and then apply in "prod" before that next Tuesday.
Upvote
0
We appreciate you guys being the guinea pigs. We started delaying our QA for a week after patch Tuesday to see if everyone else ran into issues.
Upvote
0
Here is an easily understood (and probably 99% correct) overview of what happened.
So, it looks like Cloudstrike Falcon got adminstrative permission from Microsoft to operate within the sacrosanct Microsoft kernel, but then gave itself permission to breach Microsoft's protection of the kernel to do a lot more in the kernel than Microsoft intended anything should do. I think that makes Cloudstrike Falcon a Trojan Horse by perfect definition.
So, it looks like Cloudstrike Falcon got adminstrative permission from Microsoft to operate within the sacrosanct Microsoft kernel, but then gave itself permission to breach Microsoft's protection of the kernel to do a lot more in the kernel than Microsoft intended anything should do. I think that makes Cloudstrike Falcon a Trojan Horse by perfect definition.
Upvote
0
