skewer99
Re:CrowdStrike ex-employees: 'Quality control was not part of our proc...
on Friday September 13, 2024 @08:00PM (#41536317)
AKIDs... ugh. They'll be there if you use AWS + Mac.
Again, the plaintext is the problem.
These environment variables get loaded from the command line, scripts, etc. - CrowdStrike and all of the best EDRs also collect and send home all of that, but probably in an encrypted stream?
Re:CrowdStrike ex-employees: 'Quality control was not part of our proc...
on Friday September 13, 2024 @07:57PM (#41536290)
The monitoring and collection isn't the problem, that's what modern EDR does - collect, analyze, compare, and do statistics on all of the things.
The plaintext part is not okay.