3 ms·
I seriously question why [CrowdStrike] have the certifications they do
- ColinWright 2y agoA rendering of the full rant: https://www.solipsys.co.uk/Chartodon/112920897187312739.svg https://www.solipsys.co.uk/Chartodon/112920897187312739.svg I know, many people will hate the rendering of the thread. If you want to read the original, clicking on a node will take you to the post.
- thayne 2y ago> And I seriously question who signed off on certifying them Having a little experience with certifications and audits myself, I can't say it is terribly surprising. Audits have a tendency to get caught up on things that don't really matter, and completely miss things that do. I imagine they showed auditors the testing and controls they had for releasing actual code, but didn't bother to explain how these "channel" files were deployed.