News for hackers. Stuff that matters.

A comment on Initial details about why CrowdStrike's CSAgent.sys crashed. Parent comment

Re:Initial details about why CrowdStrike's CSAgent.sys crashed by ironbound on Sunday July 21, 2024 @04:15AM (#41023406)
Next you'll be saying "I dont need an immune system..."

Fun fact an attacker only needs to steal credentials from the home directory to jump into a companies AWS account where all the juicy customer data lives, so there are reasons we want this control.

Frankly I'd like to see the smart people complaining help write better solutions rather than hinder.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by pavel_pt on Sunday July 21, 2024 @04:39AM (#41023486)
If that’s all it takes an attacker, you’re doing AWS wrong.
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by snotrockets on Sunday July 21, 2024 @04:57AM (#41023561)
Problem is that many do.

Doing it right requires very capable individuals and a significant effort. Less than it used to take, more than most companies are ready to invest.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by ironbound on Sunday July 21, 2024 @08:45AM (#41024696)
people get lazy
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by hello_moto on Sunday July 21, 2024 @11:26AM (#41025779)
This is the real world, everyone is doing something wrong.

The alternative is to replace you with AI yes?

[ Parent | on HN ]