The issues have been linked to a CrowdStrike update.
I don’t like to post links to reddit, but holy cow, is this ever a shitshow.
Major Windows BSOD issue takes banks, airlines, and broadcasters offline
Submitted 3 months ago by BrikoX@lemmy.zip to technology@lemmy.zip
https://www.theverge.com/2024/7/19/24201717/windows-bsod-crowdstrike-outage-issue
Comments
Enkers@sh.itjust.works 3 months ago
Raiderkev@lemmy.world 3 months ago
Weird, that sub has downvotes disabled it appears.
onlinepersona@programming.dev 3 months ago
And what will happen once it’s resolved? Oh, a fine that can be written off? Sure, no problem. Just took out a few countries, governments, agencies and businesses worldwide, but don’t do it again 😉 Come contract renewal, you can increase the prices to pay off the fine and we’ll diligently sign it 😘
LwL@lemmy.world 3 months ago
Are you implying they should somehow have perfect quality control? Generally the lost customer trust is enough of an incentive to not let things like this happen. Things slip through QA, and the only way to prevent that in 99.99% of cases is to invest MASSIVE amounts of money that really aren’t justified for everything. Aviation does this, because there is significant risk of death if something goes wrong, so regulations force them to. Other industries arguably should (car manufacturers…), but a random security software? No.
mkwt@lemmy.world 3 months ago
Car manufacturers have ISO 26262 to regulate safety critical software development, whereas aviation is mainly based on RTCA DO178.
The concepts are pretty similar. Details differ.
onlinepersona@programming.dev 3 months ago
Nothing is perfect, nothing is absolute, and yes that’s an oxymoron but you get the point. Anyway, there are ways to minimize risk
- A/B testing
- gradual roll out
- monitored roll out
- rollback
And not only on the side of Crowdstrike, there are things that can be done by their customers:
- OS rollback from weekly or monthly snapshots of the boot drive or system drive (probably shouldn’t change that often)
- if that isn’t possible with that OS, use another OS
- automated deployment (again, probably possible to fallback to a last known good deployment)
- investment in sysadmins
- investment in security staff
Probably lots more, but I’m not a sysadmin. I bet you though, that the hospitals, rail, and other governmental institutions simply don’t have enough money to invest in that because of budget cuts and austerity measures. Some hospitals still have Windows XP running.
Companies and governments don’t think IT and security are important until they are. It’s not about creating a perfect system, it’s about creating a system that can bounce back quickly.
Psychodelic@lemmy.world 3 months ago
This is absolutely fuckin ridiculous. Good luck IT teams