3 ms·
>Now that this Global Outage happened, it will change the landscape a bit. I seriously doubt that. Questions like "why should we use CrowdStrike" will be met w
by XlA5vEKsMISoIln 2y ago
>Now that this Global Outage happened, it will change the landscape a bit.
I seriously doubt that. Questions like "why should we use CrowdStrike" will be met with "suppose they've learned their lesson".
- hello_moto 2y agoI'm referring to the landscape how current Cybersecurity vendors deliver "detection definition" (for lack of better phrase) to their customers. If you don't send them fast to your customer and your customer gets compromised, your reputation gets hit. If you send them fast, this BSOD happened. It's more like damn if you do, damn if you don't.
- skydhash 2y ago> If you don't send them fast to your customer and your customer gets compromised, your reputation gets hit. > If you send them fast, this BSOD happened. > It's more like damn if you do, damn if you don't. What about notifications? If someone has an update policy that disable auto-updates to a critical piece of infrastructure, you can still let him know that there's a critical update is available. Now, he can do follow his own checklist in order to ensure everything goes well.
- hello_moto 2y agoWhat if they're sleeping and won't read the notification until they wake up? Wouldn't they get compromised?
- samcat116 2y agomost people will defer updates indefinitely if they are able to.
- XlA5vEKsMISoIln 2y agoOkay, but who has more domain knowledge when to deploy? A "security expert" that created the "security product" that operates with root privileges and full telemetry, or IT staff member that looked at said "security expert" value proposition and didn't have issue with it. Honestly, this reads as a suggestion that even more blame ought to be shifted to the customer.
- hello_moto 2y agoThe AV definition delivery is part of UX of the product.