Comment on CrowdStrike’s faulty update crashed 8.5 million Windows devices, says Microsoft

• lemming741@lemmy.world ⁨1⁩ ⁨month⁩ ago

  CrowdStrike’s channel file updates were pushed to computers regardless of any settings meant to prevent such automatic updates, Wardle noted.

  x.com/patrickwardle/status/1814367918425079934

  source

  • Avg@lemm.ee ⁨1⁩ ⁨month⁩ ago

    I work at an enterprise software company and have some well known, security conscience customer. The above is only true for us humans, if you have the money, you can dictate whatever the fuck you want.

    source
• Greyghoster@aussie.zone ⁨1⁩ ⁨month⁩ ago

  Normally I would agree however this doesn’t appear to be a Microsoft update but a CrowdStrike update. Given that everyone is worried about ransomware etc.

  source
• remotelove@lemmy.ca ⁨1⁩ ⁨month⁩ ago

  Absolutely that. For networks that matter, patches are usually tested independently. While I wouldn’t trust the average military command to do patch testing, any civilian contractors absolutely would, because money. (Microsoft is likely at the top of that stack…)

  There are other conditions as well. EDR infrastructure, if it exists, would need to be isolated on a “Government cloud” which is a different beast completely. Plus, there are different levels of networks, some being air-gapped.

  source