3 ms·

I thought it was going to be Crowdstrike. But I suppose that hasn’t happened yet. Whatever tech, whatever assets, whatever they have, you can do as you will,

I thought it was going to be Crowdstrike. But I suppose that hasn’t happened yet. Whatever tech, whatever assets, whatever they have, you can do as you will, I would need to have my head in the sand to be doing business with them. Too much smoke not to be at least a little fire. Just my opinion of course! Edit: One of those times practicality clashes with politics apparently. Can’t say anything bad about the company that failed to protect high profile clients, then used that failure to help start the Trump/Russia fiasco before quietly walking their statements back - because to be aware of that would mean supporting the bad man.

katbyte 7y ago
Could you elaborate on Crowdstrike?
chelmzy 7y ago
Just purchased their product as it is at the top of the EDR market. Could you explain your comment?
- SlowRobotAhead 7y ago
  As CTO I looked at it as well. The product isn’t the issue. Well, let me fix that by saying if you don’t mind your all data being entirely entirely open to your cloud protection system and their partners and contractors in a way that is completely black box, there is nothing wrong with the product. It’s the practices and their work with the FBI that came up from the 2016 election and their protection of the DNC when they were allegedly hacked by Russia, statements they made then retracted, and everything that has come since are the issues. Like I said, maybe nothing, but a lot of smoke. At the very least, I don’t want my infosec suite to have such a high profile for failure to protect incidents. Too much for me and my company. We went a larger name alternative and deployed some more open and transparent solutions where we could. I’m expecting a rebrand of the CrowdStrike name sooner than later.
  - chelmzy 7y ago
    The logs they send to their cloud (which is just Splunk in AWS) seems pretty transparent. In fact you can pull the raw logs directly from them via S3 buckets to see exactly what data is uploaded. When you say it's a black box what portion of the product are you referring to?
  - diminoten 7y ago
    What exactly was the failure you're talking about?
  - tptacek 7y ago
    Could you maybe take your political arguments somewhere else? This isn't a political thread, and yet another debate about Russia and Crowdstrike will easily drown out any other discussion we could possibly have about this New Yorker article. Even if you don't mean it to be, this might as well be trolling.
deleted 7y ago
[deleted]

katbyte 7y ago

Could you elaborate on Crowdstrike?

chelmzy 7y ago

Just purchased their product as it is at the top of the EDR market. Could you explain your comment?

SlowRobotAhead 7y ago
As CTO I looked at it as well. The product isn’t the issue. Well, let me fix that by saying if you don’t mind your all data being entirely entirely open to your cloud protection system and their partners and contractors in a way that is completely black box, there is nothing wrong with the product. It’s the practices and their work with the FBI that came up from the 2016 election and their protection of the DNC when they were allegedly hacked by Russia, statements they made then retracted, and everything that has come since are the issues. Like I said, maybe nothing, but a lot of smoke. At the very least, I don’t want my infosec suite to have such a high profile for failure to protect incidents. Too much for me and my company. We went a larger name alternative and deployed some more open and transparent solutions where we could. I’m expecting a rebrand of the CrowdStrike name sooner than later.
- chelmzy 7y ago
  The logs they send to their cloud (which is just Splunk in AWS) seems pretty transparent. In fact you can pull the raw logs directly from them via S3 buckets to see exactly what data is uploaded. When you say it's a black box what portion of the product are you referring to?
- diminoten 7y ago
  What exactly was the failure you're talking about?
- tptacek 7y ago
  Could you maybe take your political arguments somewhere else? This isn't a political thread, and yet another debate about Russia and Crowdstrike will easily drown out any other discussion we could possibly have about this New Yorker article. Even if you don't mean it to be, this might as well be trolling.

deleted 7y ago

[deleted]