10 ms·
People who gave a third party firm remote code execution control of millions of computers without any code review, reproducible builds, or accountability of any
by lrvick 2y ago
People who gave a third party firm remote code execution control of millions of computers without any code review, reproducible builds, or accountability of any kind.
If you give third parties access to your systems with proprietary code without any checks or balances because you are too lazy to fight for the budget to deploy an in-house alternative, then whatever bad results happen are partly on you.
Yes, sue CrowdStrike, but also fire every sysadmin and IT manager that recommended or approved installing it on systems in the first place.
- stavros 2y agoWhy even trust the OS at this point? Get the budget to write your own, in-house one. It's not like economies of scale really exist.
- lrvick 2y agoI only deploy open source reproducibly built operating systems with high accountability. No one acting alone can deploy a change to mission critical systems I design. This is just basic supply chain integrity.
- ikekkdcjkfke 2y agoGross negligance vs. liability waiver - fight
- pjmlp 2y agoSo when you go to a restaurant, you also go into the kitchen, review the origin seal of every ingredient, the tools using to prepare the dish, perform a background check of each kitchen employee, before commiting to anything on the menu...
- whatevaa 2y agoYup, he also stops and inspects any civil engineering he has to use (like bridges), and he definitely does have qualifications to perform those.
- prmoustache 2y agoThe info was basically on the crowdstrike whitepapers. You don't have to know the origin seal of every ingredient, but if you are allergic to peanuts, you ask if said dish has peanuts in it. Asking what the falcon agent does, how it is updated, what it has access to, and if it can be remotely controlled is part of the job of any IT engineer / manager who plans to purchase a license for crowdstrike. If you don't, you aren't doing your job.
- pjmlp 2y agoAnd when the dish has peanuts after all? I guess it is your fault, because you failed to do the allergic chemical test, before eating it.
- prmoustache 2y agoThat is not an analogy that translate to the crowdstrike incident.
- pjmlp 2y agoIt sure does, given the reasoning they aren't to blame, rather their customer.
- ramon156 2y agoYou can always go to a different restaurant given it's garbage, you can't go to another delta airlines.
- pjmlp 2y agoI am quite sure there are other airlines.
- pfannkuchen 2y agoMore like when you are a restaurant owner you do those things.
- pjmlp 2y agoAnd when one fails to do them, the customer will sue the owner when things go south.
- pfannkuchen 2y agoYeah and customers are rightly getting money back from Delta et al. Seems to hold up?