3 ms·
> If state actors had this type of capability they would use it to spy on big companies. Who says that is not ongoing? You just don't hear about it that much b
by rramadass 2y ago
> If state actors had this type of capability they would use it to spy on big companies.
Who says that is not ongoing? You just don't hear about it that much because the companies downplay/hide it for obvious reasons.
> They wouldn't waste it on causing a minor inconvinence.
This is not a "minor" inconvenience. The losses to the Economy are already running into billions and counting. See for example https://www.youtube.com/watch?v=YedowOtznNo https://www.youtube.com/watch?v=YedowOtznNo
> Lol. What next? Politicians always tell the truth? Everyone gets a free unicorn? This is just obviously not how the world works. There is a long history of anti-virus software being kind of crap.
Snark/Glibness is not an argument. I have worked in Network Security and know for a fact that Kernel mode code is treated differently than User mode code in terms of scrutiny/testing/staging/release. Second, Crowdstrike is not just another anti-virus software; they are far more broader in scope/complex and hence their wide user base. Microsoft with their wide experience would have definitely processes in place to validate them comprehensively. Hence one should be cautious in taking this incident at face value and investigate everything thoroughly. I am almost sure multiple lawsuits are in the offing but am not so sure whether the full story will come out.