5 ms·

Was somebody trying to install an exploit or back door and fucked up?

by hdhshdhshdjd 2y ago

TechDebtDevin 2y ago
Everything is a conspiracy now eh?
- choppaface 2y ago
  To be fair, the xd backdoor wasn’t immediately obvious https://www.wired.com/story/xz-backdoor-everything-you-need-to-know/ https://www.wired.com/story/xz-backdoor-everything-you-need-...
- hdhshdhshdjd 2y ago
  You do remember Solarwinds right? This is an obvious high value target, so it is reasonable to entertain malicious causes. Given the number of systems infected, if you could push code that rebooted every client into a compromised state you’d still have run of some % of the lot until it was halted. That time window could be invaluable. Now, imagine if you screw up the code and just boot loop everything. I’d say business wise it’s better for crowd strike to let people think it’s an own-goal. The truth may be mundane but a hack is as reasonable a theory as “oops we pushed boot loop code to world+dog”.
  - saagarjha 2y ago
    > The truth may be mundane but a hack is as reasonable a theory as “oops we pushed boot loop code to world+dog”. No it's not. There are many signs that point to this being a mistake. There are very few that point to it being a hack. You can't just go "oh it being a hack is one of the options therefore it is also something worth considering".
    - azinman2 2y ago
      Especially because if it was crowdstrike wouldn’t be apologizing and accepting blame.
      - owl57 2y ago
        Why? They are in a very specific business and have more incentive to cover up successful attacks than most other companies. And while I'm 99% for Hanlon's razor here, I don't see a reason to be sure it wasn't even a completely successful DoS attack.
      - hdhshdhshdjd 2y ago
        “Our employee pushed bad code by accident” is VASTLY better for them than “we didn’t secure the infra that pushes updates to millions of machines”.
    - Huggernaut 2y ago
      Look there are two options on the table so it's 50/50. Ipso facto.
      - bunabhucan 2y ago
        I believe the flying spaghetti monster touched the file with His invisible noodly appendage so now it's a three way split.
      - hdhshdhshdjd 2y ago
        I didn’t say it was 50/50, but an accurate enumeration of options does include a failed attempt at a hack. I fail to see why this is so difficult to understand.

Was somebody trying to install an exploit or back door and fucked up?

TechDebtDevin 2y ago

Everything is a conspiracy now eh?

choppaface 2y ago
To be fair, the xd backdoor wasn’t immediately obvious https://www.wired.com/story/xz-backdoor-everything-you-need-to-know/ https://www.wired.com/story/xz-backdoor-everything-you-need-...
hdhshdhshdjd 2y ago
You do remember Solarwinds right? This is an obvious high value target, so it is reasonable to entertain malicious causes. Given the number of systems infected, if you could push code that rebooted every client into a compromised state you’d still have run of some % of the lot until it was halted. That time window could be invaluable. Now, imagine if you screw up the code and just boot loop everything. I’d say business wise it’s better for crowd strike to let people think it’s an own-goal. The truth may be mundane but a hack is as reasonable a theory as “oops we pushed boot loop code to world+dog”.
- saagarjha 2y ago
  > The truth may be mundane but a hack is as reasonable a theory as “oops we pushed boot loop code to world+dog”. No it's not. There are many signs that point to this being a mistake. There are very few that point to it being a hack. You can't just go "oh it being a hack is one of the options therefore it is also something worth considering".
  - azinman2 2y ago
    Especially because if it was crowdstrike wouldn’t be apologizing and accepting blame.
    - owl57 2y ago
      Why? They are in a very specific business and have more incentive to cover up successful attacks than most other companies. And while I'm 99% for Hanlon's razor here, I don't see a reason to be sure it wasn't even a completely successful DoS attack.
    - hdhshdhshdjd 2y ago
      “Our employee pushed bad code by accident” is VASTLY better for them than “we didn’t secure the infra that pushes updates to millions of machines”.
  - Huggernaut 2y ago
    Look there are two options on the table so it's 50/50. Ipso facto.
    - bunabhucan 2y ago
      I believe the flying spaghetti monster touched the file with His invisible noodly appendage so now it's a three way split.
    - hdhshdhshdjd 2y ago
      I didn’t say it was 50/50, but an accurate enumeration of options does include a failed attempt at a hack. I fail to see why this is so difficult to understand.