3 ms·
The industry couldn’t even prepare for a bad Crowdstrike update. And yet, it figured things out in a few days or so. The ability to prepare for catastrophic sc
by atemerev 2y ago
The industry couldn’t even prepare for a bad Crowdstrike update. And yet, it figured things out in a few days or so.
The ability to prepare for catastrophic scenarios is overestimated. The ability to survive them is underestimated.
- robertlagrant 2y agoThis would be a lot worse than that. Crowdstrike was bad because everyone lets relatively untested code straight into the Windows kernel - i.e. known incompetence of approach. This would be bad despite massive care taken to have the right approach.
- atemerev 2y agoYes, except there is no “massive care”. If people are OK to install other companies’ rootkits to their critical infrastructure, they will not care about anything else, too.
- digging 2y ago"Some people did X" !== "All people do X"
- robertlagrant 2y agoThe massive care is the algorithm selection process, the careful implementations, and the long-term observation and correction of the performance of the algorithm implementations.
- HeatrayEnjoyer 2y agoCS was a software update. RSA is baked into many silicon circuits and firmware ROMs.
- atemerev 2y agoWell, hardware is replaceable, too.