Comment on Some bad code just broke a billion Windows machines

werefreeatlast@lemmy.world ⁨1⁩ ⁨month⁩ ago

• MetaCubed@lemmy.world ⁨1⁩ ⁨month⁩ ago

  This was very much not caused by windows

  source

  • Treczoks@lemmy.world ⁨1⁩ ⁨month⁩ ago

    In a way, it was. If Windows was not as crappy as it is, external solutions would not be needed.

    source

    • stephen01king@lemmy.zip ⁨1⁩ ⁨month⁩ ago

      Linux machines also require Crowdstrike because of business requirements. That does mean Linux is just as crap as Windows then?

      source

      • Treczoks@lemmy.world ⁨1⁩ ⁨month⁩ ago

        Do they really require it, or is this just the usual security theatre?

        source

        • -> View More Comments
    • MetaCubed@lemmy.world ⁨1⁩ ⁨month⁩ ago

      Is your point “Linux and Mac dont get viruses or targeted for cyberattacks”?

      Or is it “This wouldn’t have broken on a different operating system”?

      source

      • Treczoks@lemmy.world ⁨1⁩ ⁨month⁩ ago

        No to both. Windows is so broken, it needs kernel-level external software to protect it from attacks that should not be possible in the first place. It is a joke of history that this software was even worse than windows itself.

        source

        • -> View More Comments
  • werefreeatlast@lemmy.world ⁨1⁩ ⁨month⁩ ago

    I don’t hear about billions of Linux or Mac computers going down all at the same time. I’m hearing that windows allows a simple text file change to bring down all of them at the same time.

    source

    • brognak@lemm.ee ⁨1⁩ ⁨month⁩ ago

      Weird, cus it literally happened a few months ago:

      neowin.net/…/crowdstrike-broke-debian-and-rocky-l…

      This was in no way a Windows problem, this was entirely a CrowdStrike problem. Claiming otherwise makes you look like an uninformed moron.

      source

      • Entropywins@lemmy.world ⁨1⁩ ⁨month⁩ ago

        They are most likely uninformed with a very strong opinion based on how they feel…while I’d like to call them a moron I’ve done this exact thing and like to think I’m not a moron.

        source
    • MetaCubed@lemmy.world ⁨1⁩ ⁨month⁩ ago

      Calling a kernel mode driver a “simple text file” sure is interesting

      source

      • werefreeatlast@lemmy.world ⁨1⁩ ⁨month⁩ ago

        Even if you write assembly code straight out like a total hacker, it’s still a text file. Literally jump 0x12345 is text. And if it’s just a few kilobits long, then it’s a simple text file yes. Got anything else to ad? Specially if the file actually doesn’t work and the system made to run it “windows” is such shit that every copy of it got halted.

        source

        • -> View More Comments
  • General_Shenanigans@lemmy.world ⁨1⁩ ⁨month⁩ ago

    This happened because a file that CrowdStrike pushed out, which by their own processes is not one that is signed, was immediately pushed out with one of their updates. This update was pushed directly through CrowdStrike’s own method, not via Windows Update. CrowdStrike maintains this capability in order to quickly respond to and prevent security threats. The fact that they have .sys files that aren’t signed is crazy on its own, and a huge screwup by CrowdStrike. So many companies relied upon and trusted this company because up until now, everybody considered it a great product, so it was extremely popular and prevalent. It’s been a huge wake up call for everybody in I.T.

    source

    • MetaCubed@lemmy.world ⁨1⁩ ⁨month⁩ ago

      I’m not sure if you intended to reply to me, but I am aware of this. Thanks for checking NY understanding though :)

      source

      • General_Shenanigans@lemmy.world ⁨1⁩ ⁨month⁩ ago

        lol you are correct. Low on sleep like many of us here

        source