3 ms·

I’ve heard quite a few, unfortunately hearsay, reports that CrowdStrike’s engineering practices are not good. Stories I’ve heard: • Developers building binarie

by dannyw 2y ago

I’ve heard quite a few, unfortunately hearsay, reports that CrowdStrike’s engineering practices are not good. Stories I’ve heard: • Developers building binaries on their own local systems (identified via metadata) that are then pushed out globally. Inference: 1 xz-insider = global ring0. • Customer success teams sending 50 page reports on why they can’t do staged rollout (“respond to 0days”), but reality is they’re unwilling to invest in the eng infra to do so. • When they broke Linux endpoints a few months ago, “post mortem” was ignored and nothing remedied.

dist-epoch 2y ago
> “post mortem” was ignored and nothing remedied. Losing billions of dollars in stock market cap, recovery costs, and possible law-suits tends to focus the mind on these things.
- thunky 2y ago
  > Losing billions of dollars in stock market cap Still up 20% ytd from an already high valuation, so they have a long way to fall. If they don't fall all the way to zero (spoiler alert: they won't) they got off easy.