4 ms·
How sure are we, that this was not a cyberattack? It seems really scary to me, that crowdstrike is able to push updates in real time to most of their customers
by andix 2y ago
How sure are we, that this was not a cyberattack?
It seems really scary to me, that crowdstrike is able to push updates in real time to most of their customers systems. I don't know of any other system, that would provide a similar method to inject code at kernel level. Not even windows updates, as they always roll out with some delay and not to all computers at the same time
If you want to attack high profile systems, crowdstrike would be one of the best possible targets.
- deleted 2y ago[deleted]
- Grimblewald 2y agoThe amount of self pwning that goes on in both corporate and personal devices these days is insane. The amount of games that want you to install kernal level anti-cheat is astounding. The amount of companies that have centralized remote surveillance and control of all devices, where access to this is through a great number of sloppily managed accounts, is beyond spooky.
- padjo 2y agoI mean centralized control of devices is great for the far more common occurrence of Bob from accounting leaving his laptop on the train with his password on post-it note stuck to the screen.
- Grimblewald 2y agoAbsolutely, there are many reasons for why it's useful and helps keep the IT department smaller. However, there could be a little more paranoia around how access is managed, which is possible to do without severely impacting the usability of the tool and without making work unnecessarily difficult.
- andix 2y agoExactly. It's ridiculous to open up all/most of a companies systems to such a single point of failure. We install redundant PSUs, backup networks, generators, and many more things. But one single automatic update can bring down all systems within minutes. Without any redundancy.