Comment on CrowdStrike Isn't the Real Problem
timewarp@lemmy.world 1 month agoImaging environment down? If a sysadmin can’t figure out how to boot a machine into recovery to remove the bad update file then they have bigger problems. The fix in this instance wasn’t even re-imaging machines. It was merely removing a file. Ideal DR scenario would have a recovery image already on the system that can be booted into remotely, so there is minimal strain on the network. Furthermore, we don’t live in dial-up age anymore.
Brkdncr@lemmy.world 1 month ago
Imaging environment would be bitlocker’d with its key stuck in AD which is also bitlocker’d.
catloaf@lemm.ee 1 month ago
Only if you’re not practicing 3-2-1 with your backups.
Brkdncr@lemmy.world 1 month ago
Backup environment is also bitlocker’d.
catloaf@lemm.ee 1 month ago
Then you didn’t 3-2-1, because you should be able to restore from your alternate format, e.g. tape, without your existing infrastructure. Ideally your second and offsite copies are also offline, so even if you ignored the separate media rule, it wouldn’t have been affected by the crowdstrike update.
Ultimately, nobody should have to tell you not to lock your keys in the car.