I don’t hear about billions of Linux or Mac computers going down all at the same time. I’m hearing that windows allows a simple text file change to bring down all of them at the same time.
Comment on Some bad code just broke a billion Windows machines
MetaCubed@lemmy.world 1 month agoThis was very much not caused by windows
werefreeatlast@lemmy.world 1 month ago
brognak@lemm.ee 1 month ago
Weird, cus it literally happened a few months ago:
neowin.net/…/crowdstrike-broke-debian-and-rocky-l…
This was in no way a Windows problem, this was entirely a CrowdStrike problem. Claiming otherwise makes you look like an uninformed moron.
Entropywins@lemmy.world 1 month ago
They are most likely uninformed with a very strong opinion based on how they feel…while I’d like to call them a moron I’ve done this exact thing and like to think I’m not a moron.
MetaCubed@lemmy.world 1 month ago
Calling a kernel mode driver a “simple text file” sure is interesting
werefreeatlast@lemmy.world 1 month ago
Even if you write assembly code straight out like a total hacker, it’s still a text file. Literally jump 0x12345 is text. And if it’s just a few kilobits long, then it’s a simple text file yes. Got anything else to ad? Specially if the file actually doesn’t work and the system made to run it “windows” is such shit that every copy of it got halted.
MetaCubed@lemmy.world 1 month ago
Yes and at the end of the day it’s all just binary getting dumped into a cache and processed by the CPU. The point is that the intent of the file matters and while they do both hold text, the intent, purpose, and handling of the kernel mode/ring 0 driver is much different than a “simple text file”
So different in fact, that as another user pointed out, it has happened to Linux too
General_Shenanigans@lemmy.world 1 month ago
This happened because a file that CrowdStrike pushed out, which by their own processes is not one that is signed, was immediately pushed out with one of their updates. This update was pushed directly through CrowdStrike’s own method, not via Windows Update. CrowdStrike maintains this capability in order to quickly respond to and prevent security threats. The fact that they have .sys files that aren’t signed is crazy on its own, and a huge screwup by CrowdStrike. So many companies relied upon and trusted this company because up until now, everybody considered it a great product, so it was extremely popular and prevalent. It’s been a huge wake up call for everybody in I.T.
MetaCubed@lemmy.world 1 month ago
I’m not sure if you intended to reply to me, but I am aware of this. Thanks for checking NY understanding though :)
General_Shenanigans@lemmy.world 1 month ago
lol you are correct. Low on sleep like many of us here
Treczoks@lemmy.world 1 month ago
In a way, it was. If Windows was not as crappy as it is, external solutions would not be needed.
stephen01king@lemmy.zip 1 month ago
Linux machines also require Crowdstrike because of business requirements. That does mean Linux is just as crap as Windows then?
Treczoks@lemmy.world 1 month ago
Do they really require it, or is this just the usual security theatre?
MetaCubed@lemmy.world 1 month ago
Not to jump at you in another comment thread, but any OS that is deployed in a business environment should have some form of endpoint protection installed unless it is fully airgapped + isolated.
Despite the myth that “Linux doesn’t get malware”, it absolutely does and should have protection installed. Even if the OS itself was immune to infection, any possible update can introduce a vulnerability to that.
Additionally, again, even if the OS (or kernel in the case of linux) couldn’t be infected or attacked, the packages or services installed can be attacked, infected, or otherwise messed with and should be protected.
stephen01king@lemmy.zip 1 month ago
Probably the latter. Though, I’m not familiar enough with cybersecurity to make a comment on that.
MetaCubed@lemmy.world 1 month ago
Is your point “Linux and Mac dont get viruses or targeted for cyberattacks”?
Or is it “This wouldn’t have broken on a different operating system”?
Treczoks@lemmy.world 1 month ago
No to both. Windows is so broken, it needs kernel-level external software to protect it from attacks that should not be possible in the first place. It is a joke of history that this software was even worse than windows itself.
MetaCubed@lemmy.world 1 month ago
I see you’re operating on a plane of reality where windows is the only bad software, so it’s kinda pointless for me to continue here. I hope you have a wonderful day.