Go on then, tell them all to switch. I’m sure there are millions of alternatives out there right? Good luck
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
CrowdStrike Says Global IT Outage Impacting Windows PCs, But Mac and Linux Hosts Not Affected
- Thread starter MacRumors
- Start date
- Sort by reaction score
I tend to be resistant to most conspiracy theories...but interesting that Crowdstrike stock price began to dive on the 15th.
Again and again. The product in this case IS NOT vulnerable; the "Enterprise" using its Administrator permission decided to install a kernel extension. They should have done an evaluation risk vs benefit. The decided to install. That is.
Apple should offer case variants to their Mac mini that makes them great for rack mounting. Don't bother with the polished look, just make them Xserve like and able to be stacked efficiently. But then they would need a good server software....nevermind.
By whom? Windows is just a operating system, IF there`s something wrong with Windows, Microsoft is responsible, not Windows. Windows isn`t a legal entity, cant`t be held responsible for anything. Same goes with MacOS and what not, Apple is responsible.
Windows and MacOS are blamed, but that is not the same as being responsible.
If a company has a Risk department, they first need to be notified of a potential software systems' issue....who does that? The IT department. Then, backup plans would likely include some IT solutions....who does that? The IT department. My guess is that most IT departments never raised the potential issue in the first place for a Risk department to review. Besides, Risk departments often fall back on the advice of subject matter experts anyway.....who is that? The IT department.
If the product itself is vulnerable to massive global outages because some coder at a random 3rd party software company inserted rogue code, then we've just seen how vulnerable the entirety of the enterprise system that relies on MS Windows is.
If you're a hacker, you now have a blueprint for taking out much of the global computing infrastructure. You don't have to hack microsoft, you just have to hack any developer who can push an update to a large portion of the installed base that runs windows.
(btw, isn't this the storyline in Independence Day?)
No sorry, it is the opposite.
Risk starts identifying "what's going on if the IT systems is donw?" and after the process to manage the risk starts.
They go like just trust us to do the autoupdates. We are the experts and we really really know what we are doing.
Yeah sure you do. You just caused more damage than all malware authors in history combined thereby rendering them redundant.
Yep you sure do know what you are doing!
Yeah sure you do. You just caused more damage than all malware authors in history combined thereby rendering them redundant.
Yep you sure do know what you are doing!
It took the FBI all but 24 hours to open a would be terrorists phone in California last year…..
Without apples help.
Yes it was. Crowdstrike being an IT security provider means that their automatic updates are always enabled. These are different from Windows updates which are often paused and then rolled out by IT departments after a testing period. These two things are worlds different and anyone who manages a network of any meaningful size understands the difference.
Forced obsolescence? What there any confirmation that this only impacted Windows 10 and not Windows 11? I could not find anything about this.
I haven`t updated anything on auto since `89. But I sometimes cheat with the "cooldown before hitting enter". I`m presently on Linux and I tend to check first as issues tend to pop up in the forums, before I make the move. If I update stright away, it`s on me. Basically it`s on me regardless.
It was only a few months ago when untold thousands of people had their iCloud accounts suddenly lock them out and require resets. I was lucky and resolved it within an hour or so, but I heard people on these forums who were locked out entirely for week of going back and forth with Apple. Not great!
That is too vague and general. IT is ubiquitous and impacts every single element of operations. It is not actionable to simply ask "what if IT is down". You need to identify scenarios and specific system failures. The standard formula for Risk = probability x consequence. You can not access risk without specific knowledge about the systems in question, probability of failure, and the consequence if they do fail. Subject matter experts need to do this work.
This is such a major cluster F of an F up. Mind boggling impact.
..but one can possibly expect them to roll out the update by testing it on a representative and limited array of devices before going global. That`s pretty valid all down the custody chain. One could easily argue that Crowdstrike must have failed to execute that kind of due dilligence, as would end customer sys admins and the lot.