Even before the outage, I had zero confidence in crowdstrike, and I was surprised that seemingly competent organizations would adopt it. It seems like an industry failure.

Same for "network security" proxies that actually break security.

I don't necessarily disagree with all of Dan Geer's assertions, but I am unconvinced that regulation can overcome organizational stupidity.