Technology

59607 readers

3088 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

168

How One Bad CrowdStrike Update Crashed the World’s Computers (www.wired.com)

submitted 4 months ago by jlh@lemmy.jlh.name to c/technology@lemmy.world

25 comments fedilink hide all child comments

https://web.archive.org/web/20240719155854/https://www.wired.com/story/crowdstrike-outage-update-windows/

"CrowdStrike is far from the only security firm to trigger Windows crashes with a driver update. Updates to Kaspersky and even Windows’ own built-in antivirus software Windows Defender have caused similar Blue Screen of Death crashes in years past."

"'People may now demand changes in this operating model,' says Jake Williams, vice president of research and development at the cybersecurity consultancy Hunter Strategy. 'For better or worse, CrowdStrike has just shown why pushing updates without IT intervention is unsustainable.'"

you are viewing a single comment's thread
view the rest of the comments

[–] floofloof@lemmy.ca 39 points 4 months ago (2 children)

How did the update get through testing, if the bug has an immediately obvious catastrophic effect?

[–] Telorand@reddthat.com 35 points 4 months ago (1 children)

Agreed, this seems like a pretty obvious failed smoke test.

Three options seem likely to me: the build was untested, the final package got corrupted after testing, the test environment has some kind of abberant config that hid the defect.

[–] jlh@lemmy.jlh.name 16 points 4 months ago

Kernel drivers are "reviewed" and signed by Microsoft for exactly this reason. It's a security risk if any program an administrator runs could load malicious kernel drivers into windows

[–] Rolder@reddthat.com 4 points 4 months ago (1 children)

Something I have heard (take with a grain of salt) is that there was a new windows update that went out just before the crowdstrike update. And the issue happened with the new windows update.

[–] EncryptKeeper@lemmy.world 7 points 4 months ago

Not the case. I have dozens of servers last updated in May that crashed.