5 ms·
Really the underlying problem here is that their software is loading external data into their kernel driver and not correctly sanitising their inputs
by Taniwha 2y ago
Really the underlying problem here is that their software is loading external data into their kernel driver and not correctly sanitising their inputs
- xvector 2y agoI find it absolutely insane they wouldn't be doing this. At the level their software operates, it's sheer negligence to not sanitize inputs.
- blackeyeblitzar 2y agoI wonder if it’s for performance reasons.
- emseetech 2y agoMaybe, maybe, but if it's not in a hot loop, why would the performance gain be worth it?
- silisili 2y agoI'm not overly familiar with crowdstrike processes, but assume they are long running. If it's all loaded to memory, eg a config, I can't see how you'd get any performance gain at all. It just seems lazy.
- 0xDEADFED5 2y agowild speculation aside, i'd say a little less performance is preferable to this outcome.
- dboreham 2y agoIt's for incompetence reasons.
- Taniwha 2y agoThe other issue is that they push to everyone - as someone who at my last job had a million boxes in the wild, and was very aware that bricking them all would kill the company we would NEVER push them all at once, we'd push a few 'friends and family' (ie practice each release on ourselves first), then do a few % of the customer base and wait for problems, then maybe 10%, wait again, then the rest. Of course we didn't have had any third party loading code into our boxes out of our control (and we run linux)
- szundi 2y agoSame here. Also before the first phase, we test wether we can remote downgrade after upgrade.