Re:CrowdStrike fixes start at "reboot up to 15 times", get m...
by TillE on Friday July 19, 2024 @01:09PM
(#41008632)
What, the auto-updating part? Obviously the client is verifying signatures (or using TLS with a client certificate, whatever), not just accepting whatever random file comes down the pipe.
[ Parent
| on HN ]
Re:CrowdStrike fixes start at "reboot up to 15 times", get m...
by Ekaros on Friday July 19, 2024 @01:12PM
(#41008677)
Even then, how many affected machines there are? Tens of thousands, hundreds of thousands? Compromise these servers and even possible signing server and you have largest bot net or general compromise in history...
It is not unreasonable to think that this sort of software could get compromised.
Re:CrowdStrike fixes start at "reboot up to 15 times", get m...
by pas on Friday July 19, 2024 @01:22PM
(#41008770)
A few more years and maybe they will add this newfangled super-innovative thing, invented by those esoteric academics at U of Haskell ... this new thing -- umm, what was it called -- try-catch perhaps.