Based on a simular comment you've made, I think there is some confusion for you as to what driver signing actually is. It's a certificate of Authority to identify the Distributer of the driver as legitimate or not.

Indeed, this messup was signed, so correctly it was signed. As for the code/behaviour. It's nothing to do with signing.

>by approval is decentralized

Translation: it's up to whoever is the sysadmin is, which probably was responsible for crowdstrike being installed in the first place. Such "approval" would have made no difference in preventing this disaster.

how 8.5M devices got approval to install? may they came with hard to disable windows autoupdate?

>how 8.5M devices got approval to install

What makes you think that it was installed via windows update? The driver was part of crowdstrike's EDR software, Falcon. It's installed by sysadmins on corporate devices. That's how it got on 8.5M devices. It's not something that gets auto-installed when you run windows update.

gpt said it could be updated by ms https://chatgpt.com/share/8eca1a08-062f-4474-9310-95444bab67...

That's irrelevant when crowdstrike admitted it's caused by them.

this isnt a good contribution to this site