News for hackers. Stuff that matters.

A comment on How to gain code execution on hundreds of millions of people and popular apps. Parent comment

Re:How to gain code execution on hundreds of millions of peo... by account42 on Tuesday March 04, 2025 @06:52AM (#43253412)
This mentality is how we get incidents like CrowdStrike. Relying on auto-updates for security is a crutch that allows insecure designs to spread.
[ Parent | on HN ]
Re:How to gain code execution on hundreds of millions of peo... by sigmoid10 on Monday March 10, 2025 @07:01PM (#43327130)
Crowd strike was primarily an issue of running third party software in the kernel. If you're fine with this approach ad a company, you'll always be at the mercy of other people not screwing up in the lightest. Auto update issues are actually one of the nicer things you can run into over there.
[ Parent | on HN ]