4 ms·

This is the narrative that Crowdstrike wants the public to believe. Crowdstrike did the same thing to Debian machines running their software previously. The use

This is the narrative that Crowdstrike wants the public to believe. Crowdstrike did the same thing to Debian machines running their software previously. The use of these kernel-level security software packages with arguably negligible benefit compared to the experienced risks could instead be reassessed.

yjftsjthsd-h 2y ago
AIUI new Debian supports enough ebpf that it doesn't need an unsandboxed kernel module, which is a useful point of comparison. Though yeah, an OS can only do so much to limit a problem running with root, and security software legitimately needs a lot of power.
eddyg 2y ago
Not just Debian. RHEL too. Kernel panic observed after booting 5.14.0-427.13.1.el9_4.x86_64 by falcon-sensor process : https://access.redhat.com/solutions/7068083 https://access.redhat.com/solutions/7068083
number6 2y ago
There was also a Microsoft 365 outage. On the other hand is Microsoft also known to push faulty updates