3 ms·
How do you know perfectionism didn’t cause the issue? Perhaps some team has been laboring for months or years on an actual rollout system to replace what they’v
by savanaly 2y ago
How do you know perfectionism didn’t cause the issue? Perhaps some team has been laboring for months or years on an actual rollout system to replace what they’ve got, but have never shipped because things took too long.
- jahewson 2y agoThis fails to explain how they had such a shoddy system in the first place, only possible due to the opposite of perfectionism.
- lr4444lr 2y agoWhatever the reason for CrowdStrike's failure, a lazy attitude toward allowing vendors to push updates at any time in the name of a dubious "best practice" for security reasons let the bug have massively wider reach than it should have. Sysadmins should have instead thought more critically about the value disallowing such updates and pinning dependency versions to ensure they can predictably know what's running on the machines they manage, and subscribing to alerts about security holes they need to update and making informed decisions like seeing how the new updates are actually working in the wild instead of handing over the keys blindly. Want to call that "perfectionism"? Be my guest.
- Spooky23 2y agoBy what standard would you evaluate a AV definition? Crowdstrike had a sloppy process without meaningful testing, only parser validation. Assigning that task to tens of thousands of admins, most of whom have no idea what they are doing just shifts blame, not accountability.