2 ms·

Or maybe crowdstrike is dealing with the hardest threats and hence ends up having to rollout stuff rapidly against zero-days? Not a CS fanboy, but just wanted

• stoperaticless 2y ago
  Definitely incompetence. Maybe not personal, but as a collective - definitely. 1. They run inside a kernel. 2. They have many clients. (Incl. hospitals?) This implies serious severity and impact of potential incidents, so in turn it should imply certain level of quality assurance process. As we witnessed, it has glaring holes.
• ffgjgf1 2y ago
  How could the couple of minutes they saved by not testing their changes somehow made any difference?
• 7bit 2y ago
  I like the positivity that led to your suggestion. But I find it hard to follow the argumentation. They know that mistakes can take out thousands and thousands of devices, therefore it is imperative they prioritize stability over rollout speed. They have more direct access to devices, than any 0-day would ever have, therefore there is a significant risk that they do more damage with an update than any 0-day ever could. You have to remember, a 0-day could come to existence that threatens every system, but that usually happens once every couple of years (last one of that category was probably Blaster/I LOVE YOU). But CS risks of damaging the system every couple of hours with an update. Therefore, it should be tested to make absolutely sure it doesn't cause crashes. IMHO, it was sheer negligence and incompetence.