3 ms·
Urgent Lessons from the CrowdStrike Disaster
- 1970-01-01 2y agoThe urgent lesson is recklessly trusting some 3rd party code to play nicely inside ring 0 will eventually be fatal. Anything else is a layer above the root-cause.
- chrisjj 2y ago> the root cause of the disastrous security update to its Falcon Sensor program was a null pointer error in its C++ code. CrowdStrike appears to deny this. The cited CS statement is not that. It is a statement the fail was "not related to null bytes contained in ...any... Channel File". Very different.