News for hackers. Stuff that matters.

A comment on Initial details about why CrowdStrike's CSAgent.sys crashed. Parent comment

Re:Initial details about why CrowdStrike's CSAgent.sys crashed by mbreese on Sunday July 21, 2024 @11:50AM (#41025926)
Customers don’t always have a choice here. They could be restricted by compliance programs (PCI, et al) and be required under those terms to have auto updates on.

Compliance also has to share some of the blame here, if best practices (local testing) aren’t allowed to be followed in the name of “security”.

[ Parent | on HN ]
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by nerdjon on Sunday July 21, 2024 @12:04PM (#41026022)
This needs to keep being repeated anytime someone wants to blame the company.

Many don’t have a choice, a lot of compliance is doing x to satisfy a checkbox and you don’t have a lot of flexibility in that or you may not be able to things like process credit cards which is kinda unacceptable depending on your company. (Note: I didn’t say all)

CrowdStrike automatic update happens to satisfy some of those checkboxes.

[ Parent | on HN ]