3 ms·
Obviously in userspace it would only crash the running program and not the entire operating system? It's a significant difference. All of the service interrupt
by lucianbr 2y ago
Obviously in userspace it would only crash the running program and not the entire operating system? It's a significant difference.
All of the service interruptions would have been just "computer temporarily not protected by crowdstrike agent". Not the same thing at all.
- chrisjj 2y ago> Obviously in userspace it would only crash the running program and not the entire operating system? It's a significant difference. Significant and often far worse. It would leave the machine running unprotected.
- CodeWriter23 2y ago> It's a significant difference. When various apps running the world are crashing, unable to execute because malware protection is failing, there is no difference.
- macobrien 2y ago_No_ difference oversells it, IMO -- the fact that the entire OS crashed is what made fixing the bug so arduous, since it required in-person intervention. To be sure, running the code in userspace would still cause unacceptable service interruptions, but the fix could be applied remotely.