News for hackers. Stuff that matters.

A comment on Initial details about why CrowdStrike's CSAgent.sys crashed. Parent comment

Re:Initial details about why CrowdStrike's CSAgent.sys crashed by bostik on Sunday July 21, 2024 @03:48AM (#41023295)
> Approximately 100% of CVEs, crashes, bugs, [...], deserialising binary data

I'd make that 98%. Outside of rounding errors in the margins, the remaining two percent is made up of logic bugs, configuration errors, bad defaults, and outright insecure design choices.

Disclosure: infosec for more than three decades.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by epanchin on Sunday July 21, 2024 @03:58AM (#41023341)
They forgot to account for those edge cases
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by delta_p_delta_x on Sunday July 21, 2024 @04:00AM (#41023347)
Heh, touché.
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by delta_p_delta_x on Sunday July 21, 2024 @04:00AM (#41023350)
I feel vindicated but also a bit surprised that my gut feeling was this accurate.
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by bostik on Sunday July 21, 2024 @05:03AM (#41023589)
Not really a surprise, to be honest. "Deserialisation" encapsulates most forms of injection attacks.

OWASP top-10 was dominated by those for a very long time. They have only recently been overtaken by authorization failures.

[ Parent | on HN ]