News for hackers. Stuff that matters.
Re:Microsoft technical breakdown of CrowdStrike incident by justinclift on Sunday July 28, 2024 @09:32PM (#41097325)
Seems like a complaint that MS was using underhanded tactics, so Kaspersky complained to an organisation that might do something about it.

It doesn't really seem like an example of MS coming up with a better solution then discussing it with industry, unless I'm misunderstanding it?

Instead it seems a lot like MS figuring out a solution that advantages themselves then just rolling it out, at the expense of others. (?)

Re:Microsoft technical breakdown of CrowdStrike incident by intern4tional on Sunday July 28, 2024 @09:55PM (#41097404)
As someone that worked at MS, on a team that worked directly on this issue (among other things) some years ago, MS did figure out better solutions and did discuss it with industry.

MS has an entire forum for discussing these things with industry (https://learn.microsoft.com/en-us/defender-xdr/virus-initiat...) and has had variants of said forum for some time (I think the first effort was in 2010).

Kaspersky was running an SSL/TLS Proxy in the kernel IIRC and didn't want to have to move it elsewhere due to the fact it would require them to rework their product quite a bit.

The solutions MS (we) proposed were agnostic and overall better, the anti-malware industry simply doesn't want to make the changes as these things do impose technical work on existing products.

Re:Microsoft technical breakdown of CrowdStrike incident by justinclift on Sunday July 28, 2024 @10:42PM (#41097577)
No worries. That wasn't at all evident from the above complaint.

Was the drive for this industry forum coming from dealing with the EU, or was it more from MS trying to make things better without needing the prodding?

Re:Microsoft technical breakdown of CrowdStrike incident by intern4tional on Monday July 29, 2024 @01:20AM (#41098077)
Industry forum was external, MS did not start that.

I do not know enough to properly answer on the concrete reasons why, only that it was external. Sorry.

Re:Microsoft technical breakdown of CrowdStrike incident by fragmede on Sunday July 28, 2024 @10:24PM (#41097505)
As opposed to Apple, who's gone and just done that for their operating system?
Re:Microsoft technical breakdown of CrowdStrike incident by justinclift on Sunday July 28, 2024 @10:43PM (#41097581)
Apple isn't (yet) a convicted monopolist, though it seems like there's a strong case to be made about just that. ;)