3 ms·
I have flagged this because it is wrong, and there is no other way to kick it off the front page. Finding a file full of zeroes on a broken computer does not m
by snowwrestler 2y ago
I have flagged this because it is wrong, and there is no other way to kick it off the front page.
Finding a file full of zeroes on a broken computer does not mean it was shipped as all zeroes!
https://x.com/craiu/status/1814339965347610863 https://x.com/craiu/status/1814339965347610863
https://x.com/cyb3rops/status/1814329155833516492 https://x.com/cyb3rops/status/1814329155833516492
- snowwrestler 2y agoFinally confirmed by CrowdStrike themselves: https://www.crowdstrike.com/blog/tech-analysis-channel-file-may-contain-null-bytes/ https://www.crowdstrike.com/blog/tech-analysis-channel-file-...
- execveat 2y agoCrowdStrike does this trick where it replaces the file (being transferred over a network socket) with zeroes if it matches the malware signature. Assuming that these are the malware signature files themselves, a match wouldn't be surprising.
- bombcar 2y agoCrowStrike foot gunning itself would be amusing, if expected.
- kristjansson 2y agoFar and away the most entertaining of the possible root causes.
- tsavo 2y agoThis actually makes the most sense, and would help explain how the error didn't occur during testing (in good faith, I assume it was tested). In testing, the dev may have worked from their primary to deploy the update to a series of secondary drives, then sequential performed a test boot from each secondary drive configured for each supported OS version. A shortcut/quick way to test that would've bypassed how their product updates in customer environments, also bypassing checks their software may have performed (in this case, overwriting their own file's contents).
- dang 2y agoAh thanks. I've made the title questionable now.