this post was submitted on 28 Jul 2024
569 points (98.8% liked)

Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ

54669 readers
414 users here now

⚓ Dedicated to the discussion of digital piracy, including ethical problems and legal advancements.

Rules • Full Version

1. Posts must be related to the discussion of digital piracy

2. Don't request invites, trade, sell, or self-promote

3. Don't request or link to specific pirated titles, including DMs

4. Don't submit low-quality posts, be entitled, or harass others



Loot, Pillage, & Plunder

📜 c/Piracy Wiki (Community Edition):


💰 Please help cover server costs.

Ko-Fi Liberapay
Ko-fi Liberapay

founded 1 year ago
MODERATORS
 

All the principled pirates have jumped ship to lemmy so it was bound to happen sooner than later.

you are viewing a single comment's thread
view the rest of the comments
[–] wizardbeard@lemmy.dbzer0.com 9 points 3 months ago

Crowdstrike is not owned or in any way in a business relationship with Microsoft, offers the software that caused the issue for Mac and Linux as well, and in fact caused similar issues on specific Linux Distros a few months before this recent cock up.

The issue only effected Windows OS machines that were running the Crowdstrike Falcon endpoint protection software, which runs at ring 0, kernel level. This presents the same potential for causing boot loops in all OSes due to the nature of running software that deep into the guts of things. The only caveat is that some Linux Distros have separation preventing things from running at that low level, and apparently so does Mac OS.

The update was not pushed out through Microsoft, as many are incorrectly repeating. It was a malware definitions update which was downloaded automatically by the Falcon software itself, without any configuration options available for admins to stage and do partial rollouts for testing.

Also, I significantly doubt that any company is going to do a complete overhaul of its IT architecture to switch over to a new OS for end user devices, when the simplest solution is to just switch to a different endpoint protection software. I've worked half a decade in an enterprise architecture type position, that simply isn't how things work in this world.