Crowdstrike outage: Tech expert explains why it won't be an easy fix

Рет қаралды 9,200

FOX 9 Minneapolis-St. Paul

Күн бұрын

Пікірлер: 34

@joe45678tc 6 ай бұрын

Mark bringing the brutal honest opinion. Refreshing

@JeanPierreWhite 6 ай бұрын

An attack of incompetence. I like this guy.

@nerobaal6655 6 ай бұрын

It’s only going to get worse.

@nerobaal6655 6 ай бұрын

You can slow me down but you can’t stop me

@grokitall 6 ай бұрын

the only reason it is not an easy fix is because microsoft did not learn the lesson when mccaffey did the same thing years ago. just track which driver you are starting, and after the reboot disable it. for the rest of it, we already know how not to ship broken code, they just did not do what any junior developer knows how to do.

@roachtoasties 6 ай бұрын

From what I've heard isn't wasn't an untested update but a bad push of an update. An empty file was pushed out in error. Anyway, CrowdStrike is in deep doo-doo.

@bentennyson-sx8gy 6 ай бұрын

Who ever signed off on the “update” should at the very least pay a very large lump sum if not prison time millions of people are effected and the fact they didn’t test it before mass sending the update is wild

@Realityking-ym7gb 6 ай бұрын

Very interesting and informative video! Although some say it may of been a test, or at the very least, points out the vulnerabilities of the digital society that we are living in

@joe45678tc 6 ай бұрын

Also he mentions not to let the FOMO get you doing the latest updates, always wait for few days.

@jlam3927 6 ай бұрын

Have to touch every single workstation and server. Brutal.

@phaedruscj3330 6 ай бұрын

Crowdstrike blames Fancy Bear

@stevebot 6 ай бұрын

CI/CD FTW. Biggest DDOS EVAR!

@johneyon5257 6 ай бұрын

he mentioned a solution - perhaps too quickly for people to notice - but many companies have a department that tests updates before they are released company-wide - the vendor Crowdstrike should be doing a similar thing - but obviously didn't the inarticulate newscaster was hinting at another solution - diversity in software - instead of a single software taking over the vast percentage of the market (eg Windows) - if several products with different architectures were spread over the market - then the damage caused by a failure in one company would be reduced i disagree with expanding "cyberattack" to reference an accidental developer error too - the distinction is helpful - we need to know if there is an attacker with intent behind a problem - knowing this was not such an attack takes the pressure off IT - when the cause is known - IT can focus on that cause - instead of expending time and energy on widening their efforts to confront potential dangers that aren't there is there something the ordinary user can do - absolutely nothing - except call IT - or if at personal computer - if you don't have an IT expert to call - get on the internet with another device to see if there's any word about the issue

@NightFlight1973 6 ай бұрын

Your not running CS on a personal machine. It's just infra that requires a DLP solution. So that's company assets mostly. Funny enough SW airlines is just fine because apparently they're still running on Windows NT. In other words, their extreme incompetence shielded them from CS incompetence.

@johneyon5257 6 ай бұрын

@@NightFlight1973 - that Crowdstrike is not available for personal machines is good news - i know it isn't on mine - but it might have been mentioned so that people with home computers wouldn't worry - - SW airlines has - believe it or not - Win 3.1 (!!) - strong believers "if it ain't broke - don't replace it"

@notjustforhackers4252 6 ай бұрын

I got a companies 645 Windows computers back up and running in one hour yesterday from a single terminal. How? Because they were all virtulised running on thin clients in Linux KVM. Most of the problem is bad system administration and not testing or having in place a disaster recovery plan. Made some serious bank over the last fews days, by simply not being incompetent. Microsoft admins suck and the companies that employ them are stuck in the dark ages.

@JeanPierreWhite 6 ай бұрын

To be clear you didn't fix 645 windows computers. You fixed 645 windows images that were hosted on a VDI server cluster in a data center somewhere Those incompetent Microsoft admins? Many Windows computers run on actual seperate pieces of hardware requiring sneaker-net to access them. The admins are not the incompetent ones, the incompetent ones are those who chose to put Windows on a critical piece of infrastructure that isn't easy to get to.

@notjustforhackers4252 6 ай бұрын

@@JeanPierreWhite "To be clear you didn't fix 645 windows computers. You fixed 645 windows images that were hosted on a VDI server cluster in a data center somewhere" Yes, and that's where Windows should remain.

@JeanPierreWhite 6 ай бұрын

@@notjustforhackers4252 Accessing Windows through a thin client has it advantages, however many endpoints must be able to operate even if isolated from the internet so VDI is not the solution in all cases. In those cases Linux would be a superior choice IMHO.

@jlam3927 6 ай бұрын

The cure is worse than the disease.

@ironeo 6 ай бұрын

Every average user should have a VM backup of their physical machine .... I have 100's of VM backups, I don't know why Delta doesnt have VM's backup deployed in situations such as this.

@rolfhu8320 6 ай бұрын

Like always, 99% of computer problems are between monitor and keyboard.

@smar3tech343 6 ай бұрын

I wonder if there a vulnerability 🤔it sounds like whoever made this knew it could happen ppl got theories

@JTNilavu 6 ай бұрын

DOS the best OS.

@DanFreeman723 6 ай бұрын

Never ever use Microsoft Servers. Use Linux. Like Microsoft does. Clownstrike's IT boss must be a hack. To not know about Linux.

@ListerTube 6 ай бұрын

Linux had similar issues with crowdstrike not too long ago

@strayedaway19 6 ай бұрын

One faulty update and poof goes your linux server too. Seen many redhat or centos servers getting affected by kernel panics due to such updates. If you understand the core of the issue, this is reproducible in any OS by any trusted software that operates at ring0 ( super privilege ) level. > Clownstrike's IT boss must be a hack. To not know about Linux. And guess what, falcon comes for linux too. That was not affected. Only Windows was likely due to bad testing.

@mellarx1277 6 ай бұрын

Sigh, another "expert" who stammers "it cannot be done remotely, it cannot be automated". CrowdStruck just exposed how bad these critical facilities - hospitals, banks, 911 systems, airlines - are configured. Their IT are as bad as it gets. Why would you let your systems take in automated updates in the first place. It is common sense to try out updates on non-production systems first to flush out any bugs. The "expert" who stammers "it cannot be done remotely, it cannot be automated"? Common man, think again. At least he is right about the incompetent fools, but it is not just CrowdStruck. It's all them facilities affected by the outage.

@Braddeman 6 ай бұрын

because it wasn’t a sensor update it was a Rapid Response Content configuration update. kind of like a definitions update for an antivirus is the best way to describe that type of update.