CrowdStrike accepting the PwnieAwards for "most epic fail" at defcon

Re:CrowdStrike accepting the PwnieAwards for "most epic fail... by JumpCrisscross on Sunday August 11, 2024 @02:45PM (#41218422)

> It’s an argument that hits home at any bigcorp where the execs are entertaining the thought of suing CrowdStrike

Maybe? Discovery is a core element of any lawsuit. It’s also a protected process: you can’t troll through confidential stuff with an intent to make it public to damage the litigant.

If anything, I could see Delta pointing to this statement to restrict what CrowdStrike accesses and how [1]. (As well as with the judge when debating what gets redacted or sealed.)

[1] https://www.fjc.gov/sites/default/files/2012/ConfidentialDis...

[ Parent | on HN ]

Re:CrowdStrike accepting the PwnieAwards for "most epic fail... by wjnc on Monday August 12, 2024 @12:40AM (#41221210)

Thank you. Nice read. Even given a protective order to keep discovery confidential, the ensuing discussion about the clients lacking IT-policies that exacerbated this crisis is public.

Most entertaining would be the discussion where CrowdStrike would argue that based on common IT-risk criteria, you should never hand over the keys to an unaudited party not practicing common IT-risk best practices and (thus) the liability is on the organization. Talk about CrowdStrike managing risks worldwide. They are doing it right now!

[ Parent | on HN ]