Comment on Microsoft to host security summit after CrowdStrike disaster

muntedcrocodile@lemm.ee ⁨3⁩ ⁨weeks⁩ ago

• lud@lemm.ee ⁨3⁩ ⁨weeks⁩ ago

  Microsoft didn’t cause the “disaster” though.

  source

  • WeirdGoesPro@lemmy.dbzer0.com ⁨3⁩ ⁨weeks⁩ ago

    They just made the poor decisions that made CrowdStrike required in the first place.

    If they focused on selling an operating system instead of spyware, these things would happen less frequently.

    source

    • db2@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

      It exists on OSX and Linux too, they just don’t do the thing that took down Windows so they weren’t impacted.

      source

      • WeirdGoesPro@lemmy.dbzer0.com ⁨3⁩ ⁨weeks⁩ ago

        Existing and being necessary are two different things. Linux and MacOS are operating systems. Windows is an ad delivery system that masquerading as an operating system.

        source
    • lud@lemm.ee ⁨3⁩ ⁨weeks⁩ ago

      Care to specify?

      source

      • WeirdGoesPro@lemmy.dbzer0.com ⁨3⁩ ⁨weeks⁩ ago

        If Windows had better security and update practices, software like CrowdStrike wouldn’t be a necessity.

        source

        • -> View More Comments
  • deegeese@sopuli.xyz ⁨3⁩ ⁨weeks⁩ ago

    Running security products in kernel mode is precisely what caused this disaster.

    source

    • lud@lemm.ee ⁨3⁩ ⁨weeks⁩ ago

      It needs that kind of access to fight advanced attacks. It would surprise me if similar EDR programs didn’t have similar access on Linux systems, for example.

      source

      • deegeese@sopuli.xyz ⁨3⁩ ⁨weeks⁩ ago

        No, you make a management API for security products that run in user space as root, you don’t use kernel modules.

        source

        • -> View More Comments