News for hackers. Stuff that matters.

A comment on Microsoft has serious questions to answer after the biggest IT outage in history. Parent comment

Re:Microsoft has serious questions to answer after the bigge... by landr0id on Friday July 19, 2024 @11:50AM (#41007691)
>Not sure what questions Microsoft have to answer.

The only thing I could think of is if it was a driver update, the driver has to be "WHQL" signed. WHQL stands for "Windows Hardware Quality Lab" -- what quality are they ensuring? (spoiler alert from my time at Microsoft: it's not terribly robust :p )

It's not realistic for Microsoft to test drivers in a manner that represents real-world usage, but perhaps they need to start doing some basic "it works" testing as a requirement for signing a driver.

If it was a user-mode update? Yeah no real fault on Microsoft here.

[ Parent | on HN ]
Re:Microsoft has serious questions to answer after the bigge... by KHRZ on Friday July 19, 2024 @11:59AM (#41007798)
From what I heard Crowdstrike just updated their DB file, which means the bug was alreadyq there, waiting for someone to trigger it with a "low risk" quick roll out.
[ Parent | on HN ]
Re:Microsoft has serious questions to answer after the bigge... by ghthor on Saturday July 20, 2024 @01:10AM (#41014237)
So kind of like the xz exploit, carefully placed and laying in wait.

I only hope this was a good guy move by someone to knock a placed chess piece off the board.

[ Parent | on HN ]