You want Microsoft to be doing code reviews of third party software? That might have prevented this disaster but would get them in hot waters for other reasons (eg. anti-competition accusations). Not even Apple gatekeeps that hard.
>Third-parties should not be signing code that allows third-parties to reach into corporate services and push files.
So dropbox should be banned as well? It's also a third party service that pushes files onto computers.
>Microsoft InTune is the mechanism that all configuration updates should use.
Okay, so crowdstrike pushes its virus definition updates via intune instead. The bad file still lands on computers, the kernel mode driver still crashes before the computer can boot and the computer is bricked. How is this any better?
I think they warrant some extra attention by Microsoft.
> Microsoft InTune is the mechanism that all configuration updates should use.
That would make it one of the most locked down operating systems in the world, killing millions of applications overnight. Enterprise IT already have the ability to control installs, updates and patches, why move that burden to Microsoft?
Microsoft didn’t do enough due diligence on the behaviour of CrowdStrike updates. It shouldn’t allow out-of-band updates.
Third-parties should not be signing code that allows third-parties to reach into corporate services and push files.
Microsoft InTune is the mechanism that all configuration updates should use.
It appears to me that Microsoft makes it harder for third-parties to update an Xbox game, than the configuration of a kernel driver.