News for hackers. Stuff that matters.

A comment on Initial details about why CrowdStrike's CSAgent.sys crashed. Parent comment

Re:Initial details about why CrowdStrike's CSAgent.sys crashed by dartos on Sunday July 21, 2024 @08:02AM (#41024488)
Bugs happen.

Not staggering the updates is what blew my mind.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by londons_explore on Sunday July 21, 2024 @08:51AM (#41024726)
Since the issue manifested at 04:09 UTC, which is 11pm where Crowdstrikes HQ is, I would guess someone was working late at night and skipped the proper process so they could get the update done and go to bed.

They probably considered it low risk, had done similar things of times hundreds of times before, etc.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by kchr on Sunday July 21, 2024 @11:57AM (#41025973)
A good reminder of the fact that your Thursday might be someone else's Friday.
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by dartos on Sunday July 21, 2024 @09:06AM (#41024803)
> They probably considered it low risk

Wild that anyone would consider anything in the “critical path” low risk. I would bet that they just don’t do rolling releases normally since it never caused issues before.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by hello_moto on Sunday July 21, 2024 @10:27AM (#41025333)
Companies these days are global btw.

Not everyone is working on the same timezone.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by londons_explore on Sunday July 21, 2024 @10:56AM (#41025553)
They don't appear to have engineering jobs in any location where that would be considered regular office hours...
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by hello_moto on Sunday July 21, 2024 @11:42AM (#41025882)
https://crowdstrike.wd5.myworkdayjobs.com/crowdstrikecareers

I see remote, Israel, Canada.

https://crowdstrike.wd5.myworkdayjobs.com/en-US/crowdstrikec...

This one specifically Spain and Romania

I know they bought companies all over the globe from Denmark to other locations.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by londons_explore on Sunday July 21, 2024 @12:51PM (#41026336)
0409UTC is 07:09 AM in Israel. Doubt an engineer was doing a push then either...

All the other engineering locations seem even less likely.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by vitus on Sunday July 21, 2024 @02:02PM (#41026824)
On Friday, no less. (Israel's weekend is Friday / Saturday instead of the usual Saturday / Sunday.)
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by d1sxeyes on Monday July 22, 2024 @06:45AM (#41032923)
Not sure of Crowdstrike's specific arrangements, but a lot of Israelis do work on Friday mornings.
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by HDThoreaun on Sunday July 21, 2024 @10:02PM (#41030235)
Their sales pitch is being the first to apply patches for any virus. I think it makes sense to try to push as quickly as possible when speed of updates is core to your sales pitch.
[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by RoyalHenOil on Tuesday July 23, 2024 @10:54AM (#41046611)
Marketing is supposed to sell the product, not lead the product. They need to get their priorities straight.
[ Parent | on HN ]