3 ms·
Stop signing CrowdStrokes shitty kernel driver? Because that's what made the thing load. That is also pretty much the Apple way nowadays.
by stefan_ 2y ago
Stop signing CrowdStrokes shitty kernel driver? Because that's what made the thing load.
That is also pretty much the Apple way nowadays.
- gruez 2y agoSee my previous comment: "how is microsoft going to enforce this? Do you want to force developers wanting to publish software for windows to undergo annual audits (soc-2 style) to confirm that all the engineering best practices are indeed being followed? Not even Apple is that strict." Or are you saying that they should ban EDR vendors from installing drivers at all? How are you going to implement the invasive monitoring needed for EDR to work?
- stefan_ 2y agoI don't think you understand what a kernel driver is. Apple won't sign yours full stop and Microsoft already has a certification program in place.
- deleted 2y ago[deleted]
- gruez 2y ago>Microsoft already has a certification program in place. And you think Crowdstrike's driver isn't signed? Given all drivers have to be signed for windows to load it, I highly doubt that's the case. Moreover, I doubt WHQL's testing covers logic bugs. Graphics drivers crash all the time for instance, and they're definitely WHQL certified. You could inspect the code even harder, but that just goes into my previous question.