|
|
Post by reTrEaD on Jul 19, 2024 12:28:47 GMT -5
Today, thousands of flights are grounded. Many hospitals cant access patient records. Businesses across the country are crippled.
Malicious cyber attack? Nope. Crowdstrike (a cybersecurity company whose software is installed on a huge number of computer networks) sent out a software update. Unfortunately there was a coding error in the update that caused the computers to malfunction. After the error is corrected, a new update will be sent and the clients will need to reboot their systems. But it might take days to get some of the companies back online.
Computers ... making our lives more simple and convenient. (sarcasm)
|
|
|
|
Post by cynical1 on Jul 19, 2024 13:28:13 GMT -5
Quality Assurance Environment: A quality assurance (QA) testing environment is used to ensure software meets end-user expectations. This type of environment verifies that the software meets all necessary specifications and requirements and performs at a satisfactory level for users.
To which, Crowdstrike replies: Hold my beer...
And when did it become commonplace for admins to accept a vendor update without testing it first? Again, hold my beer...
HTC1
|
|
|
|
Post by unreg on Jul 19, 2024 18:14:16 GMT -5
And when did it become commonplace for admins to accept a vendor update without testing it first? Probably when lots of the the colleges, who give possible admin degrees, stopped teaching helpful logic; you know, when the helpful logic was replaced by total-personality-extreme-adjustment attempts. But, perhaps our colleges will become better?  |
|
|
|
Post by JohnH on Jul 20, 2024 0:28:36 GMT -5
It happened here late afternoon on Friday, with reports of quite a number of airlines, shops, trains and various other businesses going down. It hasn't affected me though (so far). The large engineering consultancy and also the university where I work were ok, and I was still able to buy diesel on the way home and Whattsapp my mother in the UK. Personal PC's seem rarely affected, unless part of a larger affected network.
|
|
|
|
Post by cynical1 on Jul 20, 2024 6:22:19 GMT -5
It hasn't affected me though... Yeah, my Linux box is running fine... I saw an interesting take on this whole affair on the news. The dark side of this is now the folks on the outside all know who uses Crowdstrike...and who doesn't. Now they can tailor their approach accordingly to gain access. When you enter the Internet, you enter the food chain. HTC1 |
|
|
|
Post by kitwn on Jul 20, 2024 20:07:13 GMT -5
I only found out about this event by reading the news, but it reminded me of an incident during the pandemic. Interstate arrivals in Tasmania had to show a previously acquired pass to be allowed in. This was all done online, but you could print off the pass in advance if you wanted to. I arrived back in Tasmania to find passengers all over the place having to be shown by younger fliers how to work their phones to prove they had a pass and a general air of chaos and short tempers. I waved my piece of paper and having been one of the last off the plane was first out of the airport.
Kit |
|
|
|
Post by stevewf on Jul 25, 2024 1:03:10 GMT -5
And when did it become commonplace for admins to accept a vendor update without testing it first? Valid point. I spent years involved with large organizational data centers - specifically, involved with maintaining system availability - and blindly rolling out updates was a no-no. Sadly, convincing the executives to spend money on system security (which in my definition incudes system availability) is often difficult. Until the disaster actually happens. Then the IT people get blame, and then they get money. If they'd gotten the money first, there'd be no blame to attribute. Sigh. |
|
|
|
Post by newey on Jul 25, 2024 3:51:08 GMT -5
If they'd gotten the money first, there'd be no blame to attribute. Sigh. Hindsight is abundant, foresight is rare. |
|
|
|
Post by cynical1 on Jul 25, 2024 9:43:07 GMT -5
Move Fast and Break Things. Ask Stockton Rush how that worked for him...
|
|
|
|
Post by kitwn on Jul 25, 2024 18:08:47 GMT -5
Move Fast and Break Things. Ask Stockton Rush how that worked for him... That might be difficult right now. Unless you want to lend me your Ouija board.
Kit
|
|
|
|
Post by sumgai on Jul 27, 2024 13:07:29 GMT -5
And when did it become commonplace for admins to accept a vendor update without testing it first? Again, hold my beer... said it for me: Sadly, convincing the executives to spend money on system security (which in my definition includes system availability) is often difficult. Some time ago, it became the norm for C-Suite inhabitants to exert more control than necessary. IOW, they wanted to prove their worth via tactics, instead of staying in the strategy part of things. Hence, the actually knowledgeable people were shoved aside from the decision-making discussions, and were forced to institute what the higher-ups decreed. As you well know, c1. You've been there, you've done that, you even bought the T-shirt (and then spilled your coffee on it). Until the disaster actually happens. Then the IT people get blame, and then they get money. If they'd gotten the money first, there'd be no blame to attribute. Sigh. Being stripped of all power beyond that entrusted to a PFY, no money will flow into an IT department until all of the previous SysAdmins have been "reluctantly allowed to seek other career opportunities" - and we all know that that kind of statement means, right? It means that the C-Suite individuals who said "just let the vendor take care of it, they know what they're doing" will get a pay raise and a bonus at the end of the quarter. In the meantime, a couple billion people are left holding the bag, some of them in even deeper kimchi for losing big bux during a financial transaction that was never completed at a crucial moment. tl;dr: There's a reason we have the word "testing" in our lexicon. Sadly, Wall St. says that we no longer need to pay any attention to that word. That's the real SIGH in all this. sumgai |
|
