IT Department's Plan

Remember guys, it took about a decade for Solar Winds to discover somebody had root access to everybody that used their software, another decade for somebody outside Solar Winds to discover it and tell everybody, and half a decade with nobody claiming to have solved the issue up to now.

So when you believe that your computer with an EDS is safe just because you can't use it, think again.

Reminds me of a local cyber security firm, which declares war on a group of hackers. The CEO went on television to "double dog dare" the hackers to hack their servers and claim their firewalls are impenetrable.

Well you can guess the results, within 48 hours, their servers went down one after another. And when shit about to hit the fan, they literally turned off all of their servers for days. They hired a 3rd party IT firm to patch their security, then the CEO declared victory in a local newspaper.

other companies could have shipped a lot worse.

other companies governments could have shipped a lot worse.

FTFY

I laugh and it does/did(over now) affect me. Bwahaha. Im getting work done and nobody can interrupt with email.

For a company this big it would also have to have gotten past a code review and QA team, right? ... right? ...

Yeah, something this big is absolutely not one engineer's fault. Even if that engineer maliciously pushed an update, it's not their fault --- it was a complete failure of the organization, and one person having the ability to wreck havoc like this is the failure.

And I actually have some amount of hope that, in this case, it is being recognized as such.

This is an industry wide issue. This is just the first symptom.

Centralize control in house.

Also: don’t trust your employees to boot into safe mode. Trust a 3rd party to freely install system level files at any time.

Exactly. This is exactly the problem, and unless people wisen up the software security problem is only going to get worse. Companies and Governments need to rethink how they approach security entirely. This is a preview of what is to come, its only going to get worse and more damaging from here, and none of the vendors care.

Just remember to take off on 2038-01-19

Defending Windows in a linux memes community.

That's a bold move cotton, let's see how that works out for 'em

I’m pretty sure Windows is plenty secure.

Haha sure. Windows NT MIGHT be considered 'secure' from an architectural standpoint but literally of this falls apart when you tape all the Microsoft Dark Patterns on it that ruin the security. Its a joke, and that's the entire problem.

Think: Microsoft Accounts, now the "secure" Windows NT Local User Authentication is effectively backdoored by MS and makes you vulnerable to phishing attacks. Windows Update: Constantly pushing dark patterns and 'features' that it discourages people from updating so then guess what, people don't update! The fact that Windows so easily allows Crowdstrike to make system level changes like this without trying a whiny fit is also apart of it. Think about the fact how easily Microsoft allows stuff like Valorant anti-cheat and Crowdstrike, which are effectively rootkits, to be installed with one UAC prompt. In reality this issue is not really Microsoft's fault directly, but in a bunch of indirect ways they encourage this and allow it to happen, and we have seen time and time again, Microsoft DOES NOT CARE ABOUT SECURITY.

If anything this "Crowdstrike" software showcases the endemic problem in software security and how our system is failing and continuing to fail us. Its an anti-virus, but we already HAVE Windows Defender. These corporations should not be using some random 3rd party Antivirus, I doubt it even does much good, its just cargo-culting "oh, this is industry standard, so we have to use it." This is the kind of thinking/approach that Microsoft encourages.

In general it is. Opensource software has less bugs that proprietary. And even those bugs can be mitigated with hardening.

It's not, in fact out of the box Linux is SIGNIFICANTLY more insecure than windows.

The thing is, hackers and hack tool makers target the largest market segment to gain the most conversions.

Apple users used to gush about how virus proof they were until they hit decent market share, and then they got plenty of malware.

Same thing with Linux but the real difference is you need a few decades of linux experience to fix anything in a timely manner.

There is nothing Microsoft I would consider "top tier" when it comes to security.

Defender does a great job for many AV tasks. Crowdstrike does more, and protection isn't tied to windows updates.

This isn't a situation where companies just chose not to use the free item, the free item has other costs (management overhead) and is missing some features.

The best answer, of course, is to not use windows for anything that needs to be secure.

Edit: For those who think I'm wrong, cool. I'm not but you are welcome to disagree.

There is a difference between the free defender and paid for defender. If you're a home user, check out defenderui.com to get (many, not all) features that are normally limited to intune/gpo.

A full and proper deployed defender stack is very good, but in terms of management.... The approach to different os's is practically cobbled together, the webui is horrific, and it lacks some basic functionality. A problem to manage a system like this is a problem to deploy a system like this.

If you're on the free Defender level, you are not getting anywhere near the same features as falcon, there is absolutely zero question about that.

Do you use CrowdStrike on your PC? If not, you have nothing to worry about