3 ms·
To people who say this is not a Microsoft issue... it absolutely is a Microsoft issue. Microsoft allowed third parties to muck with the Windows kernel in a way
by breadwinner 2y ago
To people who say this is not a Microsoft issue... it absolutely is a Microsoft issue. Microsoft allowed third parties to muck with the Windows kernel in a way that makes the computer unbootable. How is that not a Microsoft issue?
Apple has a vetting process before they will allow an app to be added to their app store. Why doesn't Microsoft have a vetting process before allowing a third party to mess with the Windows kernel? Does Crowdstrike have SOC2 or some other certification to make sure they are following secure practices, with third-party verification that they are following their documented practices? If not, why not? Why doesn't Microsoft require that?
It is clear that the status quo can't continue. Think about the 911 calls that didn't get answered and the surgeries that had to be postponed. How many people lost their lives because of this? How does the industry make sure this doesn't happen again? Just rely on Crowdstrike to get their act together? Is it enough to trust them to do so?
- deleted 2y ago[deleted]
- efitz 2y agoThey absolutely do, long before Apple did: WHQL (pronounced “wickle”). https://blogs.windows.com/windowsexperience/2018/12/19/driver-quality-in-the-windows-ecosystem/ https://blogs.windows.com/windowsexperience/2018/12/19/drive...
- flowerlad 2y ago“Drivers are tested extensively through a process that involves many companies.” That didn’t happen. Apparently, the policy for drivers does not apply to kernel modules… WTF!!
- efitz 2y agothe driver in question was tested and passed WHQL. CrowdStrike included functionality in the driver to interpret a downloadable file (similar to an antivirus signature file). The file in the problematic update was malformed, and the CrowdStrike driver did not handle this case properly; Windows was unable to continue given the exception in question[1]. No operating system can guarantee that a driver will never cause the machine to crash. This wasn’t Microsoft’s fault. [1] https://youtu.be/wAzEJxOo1ts?si=WZC1fq2Vro8K9vqS https://youtu.be/wAzEJxOo1ts?si=WZC1fq2Vro8K9vqS
- AnimalMuppet 2y agoMicrosoft can't really "certify" their way out of this. Crowdstrike updates as they find threats; that is, all the time. Microsoft can't perfectly vet every update - they come too fast.
- lambdaone 2y agoThat's all fine, until one day Crowdstrike is the threat.
- AnimalMuppet 2y agoRight. So the model is broken. You cannot both respond to threats in a timely manner and have Microsoft certify that the update is safe. That leaves you either not responding quickly or responding with uncertified updates. In the past, we have examples of not responding quickly that took down large chunks of the internet (I don't remember the examples, but they were quite famous at the time). Now we have an example of a fast, uncertified update taking down a large chunk of the internet. So, given that it can take down much of the internet no matter which we choose, now what do we do?
- breadwinner 2y agoCrowdstrike didn't have the right processes in place. What can we do? Require them to have documented processes, and require periodic (like every 6 months) third-party auditing that they have the right processes, and they are complying with their own processes. More info: https://en.wikipedia.org/wiki/System_and_Organization_Controls https://en.wikipedia.org/wiki/System_and_Organization_Contro...
- breadwinner 2y agoSo they need to certify that the third party has the right processes in place, as opposed to certifying the binary output. Look up SOC 2.
- isbvhodnvemrwvn 2y ago
- hnburnsy 2y agoWhy can't windows rollback changes after it detects 3 blue screens in a row? Does anyone know if this issue occured on Windows Arm?
- isbvhodnvemrwvn 2y agoRollback what changes? It doesn't know anything about update process of signatures.
- ahepp 2y agoFilesystem checkpoints? A/B partitions? boot into safe mode and check for more updates?
- isbvhodnvemrwvn 2y agoAgain, Microsoft doesn't control modules people choose to use and can't assume anything about how they work, much less disable them without operator approval. Imagine if malware could somehow crash this module - would you be happy about the OS automatically rolling bank introduction of said module, opening your system to vulnerabilities?