4 ms·
If you think about it, any software update can make something bad happen. Maybe we just shouldn't be running bare-metal installs for critical infra in the first
by seiferteric 2y ago
If you think about it, any software update can make something bad happen. Maybe we just shouldn't be running bare-metal installs for critical infra in the first place. Just run a hypervisor taking snapshots daily or before updates and if it bricks a system it restarts into the last good image. Critical infra should be much more resilient and defensive than it is.
- Retr0id 2y agoEasier said than done, since a hypervisor is yet another moving part that can fail. People were running Crowdstrike on AWS (which in most (all?) cases involves a hypervisor), and recovery was still painful for them.
- Zambyte 2y agoMaybe it'd time to concede that Tanenbaum was right.
- hypeatei 2y agoThat, or just simplifying these systems with clear boundaries between them. Why are flight status displays running Windows with endpoint security in the first place? Data could be loaded periodically from one authorized machine/job on the network with all other outbound/inbound network access restricted.
- giantg2 2y agoThat only works if it's self contained. As soon as you need to reach out and interact with other systems, version mismatches can still cause issues even if your system hasn't changed. Integration points and input are the biggest points of failure or vulnerabilities. A system that doesn't take input or integrate with others is super easy to maintain (of course most are practically useless too).
- alexlll862 2y agoyour hypervisor needs security updates too.