> We don’t call for everyone to go back to having their own datacenter because AWS had a massive outage.
We don't? Okay, well, probably not everyone.
Re:The CrowdStrike Failure Was a Warning
by soraminazuki on Monday July 22, 2024 @03:08AM
(#41031640)
> I don’t think removing the tools that slow or prevent a hack is the answer.
No one ever said that. It's about removing tools that introduce a huge security risk for abysmal gain. Antiviruses are there for compliance and are detrimental to actual security as explained by GP.
CrowdStrike isn't just an anti-virus/malware solution. It also provides observability into the running processes. It integrates into threat intelligence so you can take hashes of known bad processes and see if it exists across your fleet of devices.
It can isolate devices from a network and only allow the SOC access to investigate.
Of all the lessons that could be learned from this, I think this not the best one. We don’t call for everyone to go back to having their own datacenter because AWS had a massive outage.