3 ms·

> But let's be real for a second - if a vendor of yours for something so critical shat the bed that much (again - no testing, pushing out an update that crashes

> But let's be real for a second - if a vendor of yours for something so critical shat the bed that much (again - no testing, pushing out an update that crashes everything for everyone for the second time in a few months), and your reaction is "it will be too complicated to move away from them, so let's just pray they improve"... That's not OK. And it's precisely because of this kind of reaction I wish the corporate death penalty on Crowdstrike. If their users cannot be trusted to make the correct choice and drop the insecure negligent vendor, the vendor should disappear and leave them with no choice. I sure hope that companies you work with or for never ever have a bug. Please just do not tell me that you use MS Windows?? You do not use that, right? Because they have so many issues and you have looked with Bill Gates at how exactly they do their QA. Or Linux!! Hope you do not use that either. Full of bugs, repeatedly. What a pile of crap. What world do you live in? Are you showing your customers your CI/CD when you sell your product? Are you telling them to never ever use Windows or Linux or Mac or VAX or AS400 or anything that has bugs? Changing a product like CS is a MASSIVE MASSIVE effort. An effort that takes a year and yes, you have to look for alternatives (always, not only when there is an issue) but you do not do that "hop!" like this. I am frightened by people who claim to be experts in areas they have no idea about, and explain what the ones who spend their time there must do. This looks very much like some management. I am sure you have compared discoverability before and after having an EDR and the market for EDRs, and tested all of the big players and made a decision after discussing QA with their QA managers. Good for you. Not everyone have the same capabilities like you, we must rely on a team of clueless people who do that over a year with input from the vendor. I will be sure to ask for the CI/CD pipes, details of QA etc when I stumble upon the next product - because someone on Internet told me that they think that this is how it should be done.

sofixa 2y ago
> sure hope that companies you work with or for never ever have a bug We aren't talking about a bug, we're talking about wilful negligence here (funnily, your example about Microsoft is on point - Azure exhibits the same type wilful negligence with their absurd lack of security). It's not a "shit happens" type of situation - of course bugs happen. Security bugs happen too. Sometimes even very stupid ones! Again, we're talking about a company with highly privileged access (to the kernel) and associated potential for security exploits and crashes not doing any testing on updates. And not only releasing a broken update that results in crashes once, but fucking twice. Why didn't the they learn from it the first time? It was inexcusable once, it's even more inexcusable that it happened twice. And yes, if you buy from random vendors without doing your due diligence on how their failure might impact you, and what they're doing to make sure it doesn't happen, you're taking massive risks. If you get burned by it and still can't be bothered to think about this, I don't know what to tell you. At least that checkbox is ticked and we have EDR so we secure, am I right? That's all that matters for a lot of cybersecurity people, hope you're not one of them.

sofixa 2y ago

> sure hope that companies you work with or for never ever have a bug We aren't talking about a bug, we're talking about wilful negligence here (funnily, your example about Microsoft is on point - Azure exhibits the same type wilful negligence with their absurd lack of security). It's not a "shit happens" type of situation - of course bugs happen. Security bugs happen too. Sometimes even very stupid ones! Again, we're talking about a company with highly privileged access (to the kernel) and associated potential for security exploits and crashes not doing any testing on updates. And not only releasing a broken update that results in crashes once, but fucking twice. Why didn't the they learn from it the first time? It was inexcusable once, it's even more inexcusable that it happened twice. And yes, if you buy from random vendors without doing your due diligence on how their failure might impact you, and what they're doing to make sure it doesn't happen, you're taking massive risks. If you get burned by it and still can't be bothered to think about this, I don't know what to tell you. At least that checkbox is ticked and we have EDR so we secure, am I right? That's all that matters for a lot of cybersecurity people, hope you're not one of them.