News for hackers. Stuff that matters.

A comment on Multiple airlines disrupted due to Microsoft Azure outage.

Re:Multiple airlines disrupted due to Microsoft Azure outage by crazytony on Friday July 19, 2024 @02:50AM (#41002621)
This rollercoaster is not over yet. There's a crowdstrike issue causing windows machines/servers to brick globally and this industry is heavily windows dependent. It may or may not be related to the Azure issue but it's suspicious to me.

https://www.reddit.com/r/crowdstrike/comments/1e6vmkf/bsod_e...

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by bun_terminator on Friday July 19, 2024 @03:52AM (#41003082)
I have never heard of crowdstrike. Is that some kind of antivirus? How is that related to PCs not booting? And why does it affect so many PCs if I've never heard of it? I'm so confused
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by shrikant on Friday July 19, 2024 @03:58AM (#41003140)
It's enterprise anti-malware that [in addition to other bits] has a client component installed on all PCs in the corporate network. An update to that client component (called an "endpoint") is causing those Windows machines to BSOD.

It's unlikely you'd have heard of it unless you've worked at a large enterprise that runs primarily Microsoft IT.

Crowdstrike does have Mac/Linux "endpoints" also (IIRC) but I'm unsure if they're affected as well.

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by bun_terminator on Friday July 19, 2024 @03:59AM (#41003160)
I've never seen a non-Windows machine tbh. But our IT just send out an update that we don't use crowdstrike. Strange that I never heard of it if it's so widespread. But thanks
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by bravetraveler on Friday July 19, 2024 @04:09AM (#41003257)
You see it more in highly regulated areas. We ran mostly Linux at the last place we used it. Existed solely to check a box.

Company seemingly came out of nowhere but has existed for a while... I think it's suspicious.

Have we not learned from SolarWinds and company? The vendors become part of your posture. All of us leaning on the same vendors consolidates far too much

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by jachee on Friday July 19, 2024 @04:37AM (#41003598)
My company MacBook with the falcon client does not seem to be affected by this.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by Klonoar on Friday July 19, 2024 @04:46AM (#41003697)
The problem is seemingly specifically in the Windows driver, you're unlikely to see an issue if you're not running Windows.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by jurmous on Friday July 19, 2024 @05:50AM (#41004271)
MacOS does not allow kernel extensions anymore so these kinds of crashes cannot happen. The falcon client on Mac hooks into another layer
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by vladvasiliu on Friday July 19, 2024 @05:28AM (#41004095)
>Crowdstrike does have Mac/Linux "endpoints" also (IIRC) but I'm unsure if they're affected as well.

We have this crap running on our computers, and only Windows boxes seem affected.

On Linux this isn't running in kernel mode (our kernels are too up-to-date) and we don't seem to have any issue there.

Haven't heard anything about macs though.

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by red_Seashell_32 on Friday July 19, 2024 @05:40AM (#41004196)
MacOS seems to be fine (or I was too late to get an update)
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by jurmous on Friday July 19, 2024 @05:50AM (#41004259)
MacOS does not allow kernel extensions anymore luckily
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by andyjohnson0 on Friday July 19, 2024 @06:11AM (#41004436)
> Crowdstrike does have Mac/Linux "endpoints" also (IIRC) but I'm unsure if they're affected as well.

The problem seems to be in a device driver installed by Crowdstrike - so I'm guessing whatever the bug is, it's specific. to their Windows product.

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by vladvasiliu on Friday July 19, 2024 @06:18AM (#41004498)
Windows complains about some page fault or something in a file name csagent.sys. On my machine this file hasn't changed in several days, but the issue only happened this morning like for everyone else.

This looks suspiciosly a case of "let's download random crap from the web and run it in kernel space. what could possibly go wrong?"

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by shadow28 on Friday July 19, 2024 @03:56AM (#41003111)
They make security software that is really popular in various industries.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by davidmurdoch on Friday July 19, 2024 @05:23AM (#41004047)
They make malware that steals funds from corporations (willingly!) so these corps can tick a security checkbox for some certification investors have been told is paramount; it's just disguised as security software.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by account42 on Monday July 22, 2024 @04:02AM (#41031877)
So in other words, they make "security" software just like any other security software company.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by moogly on Friday July 19, 2024 @05:51AM (#41004272)
Baffling name. Sounds more apt for a DDoS service.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by Taniwha on Friday July 19, 2024 @02:54AM (#41002642)
HN discussion here - needs to be on the front page - here in NZ ATMs, supermarkets, satellite TV channels are all down

https://news.ycombinator.com/item?id=41002195

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by mirekrusin on Friday July 19, 2024 @03:09AM (#41002743)
Europe will wake up to flood of problems as well. This needs to be at the top of HN. We are experiencing multiple issues here in EU.

This issue feels extremely widely spread.

Maybe we don't hear ppl complaining because we're offline? :)

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by javaunsafe2019 on Friday July 19, 2024 @04:59AM (#41003814)
Berlin airport is down
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by mitjam on Friday July 19, 2024 @05:53AM (#41004292)
Just in time for the beginning of school holidays in Berlin. Today, they expected 86.000 travelers in BER alone (https://www.airliners.de/flughafen-ber-erwartet-rekordzahl-p...)
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by nicbou on Friday July 19, 2024 @05:04AM (#41003872)
A few others as well, it seems.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by vesinisa on Friday July 19, 2024 @05:24AM (#41004050)
Maybe they have rolled back the update and Windows boxes in Europe are no longer pulling it?
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by vladvasiliu on Friday July 19, 2024 @06:15AM (#41004472)
They did around 8:30 CEST (6:30 GTM) as I understand it. Some of our servers managed to unbork themselves after a number of boot loops, but not all.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by surfingdino on Friday July 19, 2024 @05:41AM (#41004212)
Ryanair is unable to check in passengers online. You can check in at the airport.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by ben_w on Friday July 19, 2024 @07:53AM (#41005365)
I had to physically stand in a queue for about 8 hours for a Ryanair customer support desk in an airport when the airport runway was closed by 1-2cm of snow.

I forget the exact timing and can't be bothered to look up my notes, but it was something like 11pm to 7am at the origin airport for a flight that was supposed to have landed at the destination around 8pm, as we were also stuck on the runway for an hour or so and even getting that far had been delayed.

The replacement flight the next day was also cancelled even though the airport was open.

I ended up taking a ferry and a train, and that was still simultaneously faster than the next available Ryanair replacement flight and cheaper than any other provider on short notice. Fortunately I had an understanding boss who didn't mind me arriving 4 days later than expected, and also a place to crash for free while working out the best route home.

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by geek_at on Friday July 19, 2024 @06:05AM (#41004383)
it's already noon in central europe and yes everythings fucked. except for the linux powered companies
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by dagaci on Friday July 19, 2024 @03:35AM (#41002930)
On the wireless they are reporting a bad Crowdstrike update and a major Azure failover in central USA as separate events, are they they the same or different?
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by dagaci on Friday July 19, 2024 @04:01AM (#41003181)
A whole lot of people are running Crowdstrike in the cloud and on local PC An crowdstrike update last night caused a windows kernel panic Azure/Crowdstrike personel have spend rolled back the update in the cloud Local IT people will have to revert it from local machines manually
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by SSLy on Friday July 19, 2024 @03:50AM (#41003073)
They seem either unrelated, or the Azure one was caused by CrowdStrike.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by pantulis on Friday July 19, 2024 @04:08AM (#41003248)
Too many black swans the same day, I'd guess Azure is running Crowdstrike software.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by gliptic on Friday July 19, 2024 @04:36AM (#41003582)
Azure having problems is not a black swan event.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by pantulis on Friday July 19, 2024 @04:41AM (#41003634)
Fair point.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by caf on Friday July 19, 2024 @02:55AM (#41002651)
Yeah, it's far from just airlines affected.

https://www.abc.net.au/news/2024-07-19/global-it-outage-crow...

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by maeil on Friday July 19, 2024 @04:39AM (#41003616)
Almost certainly Azure using Crowdstrike on Windows in one way or another.

Not surprising that AWS and GCP don't seem to be hit as they wouldn't run anything on Windows, unlike Azure, who I'm sure are forced to do so under MS' infamous interdepartmental structure.

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by raverbashing on Friday July 19, 2024 @07:34AM (#41005194)
Ugh.

Though I can image there's a Azure market for "Citrix server" kinda thing in the cloud

(or maybe it's SaaS - Solitaire as a Service)

[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by classified on Friday July 19, 2024 @06:21AM (#41004520)
Companies using Windoze for anything touching customer business should get sued by their customers.
[ Parent | on HN ]
Re:Multiple airlines disrupted due to Microsoft Azure outage by craxdevil7 on Friday July 19, 2024 @12:53PM (#41008452)
true, got some insights why this happened https://medium.com/@confusedcyberwarrior/when-security-becom..., but how they didn't had an update process like testing or QA?
[ Parent | on HN ]