4 ms·
Siblings miss critical life-extending treatment because the hospital IT department didn’t architect their endpoint update strategy correctly. This should have r
by whalesalad 2y ago
Siblings miss critical life-extending treatment because the hospital IT department didn’t architect their endpoint update strategy correctly. This should have rolled out in small, incremental steps to verify no failures. A mass “select * from hosts” global update with no testing (even if the vendor says it’s good) is entirely foolish.
Hopefully folks learn from this.
- bongodongobob 2y agoIn the 20 years I've been in IT, in a variety of industries, with all the legacy manufacturing systems I've dealt with, I've never seen a software patch that blue screens all computers. Firmware, yes, rare, but never software. This is way outside of the norm.
- whalesalad 2y agoAnything operating that low in the stack is going to be a risk if shit goes wrong. It’s essentially a untrusted third party kernel update. Any sysadmin worth a dime knows not to blindly upgrade something like a kernel without staging it first - this is no different. But honestly windows admins don’t understand the systems they’re maintaining.. so this was inevitable.
- bongodongobob 2y agoYou have no idea what you're yapping about. Bye.
- whalesalad 2y agoDo you?
- CAP_NET_ADMIN 2y agoMaybe try reading what happened during the Crowdstrike fiasco and then comment about it. Crowdstrike auto updates itself, the agent allows you to select update cadence, but this was an update to the "channel" files which auto update themselves a few times per day and you don't have any control over it.
- whalesalad 2y agoDoesn’t matter. You had control over instituting it in your environment. The onus is on you.
- schroeding 2y agoNo you didn't. External audits and compliance forced you to install an EDR, said EDR had no option to defer this kind of update. Crowdstrike sold itself to the suits as said EDR. What do you do, ignore both your management and the security checklist given by the government?
- CAP_NET_ADMIN 2y agoI've personally trialed Crowdstrike for my company (around 30 people) and found it a buggy mess, especially on non-Windows platforms - after the trial was over we decided to not use it. However this is not the case for most companies, feds, auditors or both will force you to use this BS and there's absolutely nothing you can do.
- downrightmike 2y agoCrowdstrike apparently doesn't believe in doing that and there is a way for firms to set that, but this issue bypassed (ignored) that protection