News for hackers. Stuff that matters.
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by avree on Sunday July 21, 2024 @02:27PM (#41027038)
A lot of snarky replies to this comment, but the reality is that if you were selling an anti-virus, identified a malicious virus, and then chose not to update millions of your machines with that virus’s signature, you’d also be in the wrong.
Re:Initial details about why CrowdStrike's CSAgent.sys crashed by naasking on Sunday July 21, 2024 @03:14PM (#41027384)
> identified a malicious virus, and then chose not to update millions of your machines with that virus’s signature, you’d also be in the wrong.

No, for exactly the reason we just saw, and the same reason why vaccines are tested before widespread rollout.

Re:Initial details about why CrowdStrike's CSAgent.sys crashed by aforwardslash on Sunday July 21, 2024 @04:40PM (#41027904)
On the other hand, diseases vaccines prevent dont have almost instantaneous propagation, thats why they are effective at containing propagation.

As an example, reaction time is paramount to counter many kinds of attacks - thats why blocklists are so popular, and AS blackholing is a viable option.

Re:Initial details about why CrowdStrike's CSAgent.sys crashed by rco8786 on Monday July 22, 2024 @07:23AM (#41033157)
I’m not saying don’t update? I’m talking about rolling the update over the course of a short amount of time, like under an hour. With the ability to stop the rollout.