Comment on CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft

Greyghoster@aussie.zone ⁨3⁩ ⁨months⁩ ago

• Avg@lemm.ee ⁨3⁩ ⁨months⁩ ago

  Those computers don’t have auto update enabled

  source

  • lemming741@lemmy.world ⁨3⁩ ⁨months⁩ ago

    CrowdStrike’s channel file updates were pushed to computers regardless of any settings meant to prevent such automatic updates, Wardle noted.

    x.com/patrickwardle/status/1814367918425079934

    source

    • Avg@lemm.ee ⁨3⁩ ⁨months⁩ ago

      I work at an enterprise software company and have some well known, security conscience customer. The above is only true for us humans, if you have the money, you can dictate whatever the fuck you want.

      source
  • Greyghoster@aussie.zone ⁨3⁩ ⁨months⁩ ago

    Normally I would agree however this doesn’t appear to be a Microsoft update but a CrowdStrike update. Given that everyone is worried about ransomware etc.

    source
  • remotelove@lemmy.ca ⁨3⁩ ⁨months⁩ ago

    Absolutely that. For networks that matter, patches are usually tested independently. While I wouldn’t trust the average military command to do patch testing, any civilian contractors absolutely would, because money. (Microsoft is likely at the top of that stack…)

    There are other conditions as well. EDR infrastructure, if it exists, would need to be isolated on a “Government cloud” which is a different beast completely. Plus, there are different levels of networks, some being air-gapped.

    source