Crowdstrike has a caused a mess

[R1TCntrlMaIzzy]

No excuses for the Riv Dev team, and some of the update mishaps. But CS is at a Global scale.

Next time an OTA messes our R1s, think about this.

https://www.tomsguide.com/news/live/microsoft-worldwide-outage-live

Yes, the article notes an issue with MS, Office, Azure. The CS matter is more critical.

Sponsored

 

[iansriv]

With a name like that, it was only a matter of time before they actually did strike the crowd.

 

[COdogman]

It’s like Y2K except no one had a chance to panic for years in advance!

 

[thrill]

Someone hurt the internet.

 

[Zoidz]

The scary part is this was an honest mistake. There are other risks out there that are potentially even more devastating on a wide spread scale. The "polyfill.io Supply Chain" vulnerability was caught before it could be used for wide spread damage. In a nutshell, a widely used javascript library that downloads automatic updates changed ownership from the long time legit developer and was bought by a Chinese company. That company then intentionally embedded stealth malware in the library. 100k web sites at risk of being a host vector for malware, thereby potentially affecting millions of end users.

It's not IF something like this will happen again, it just a matter of when....

 

[Zoidz]

Various unverified reports online are saying it was a null pointer exception that caused the crash. Doh!

 

[R1TCntrlMaIzzy]

That's all it takes, an extra space, wrong character to break, what should be a fix. The other issue is, as much testing, checks are done, some regressions are not apparent until public.

And, yes, most are honest mistakes and sadly a matter of when it is a deliberate attack. Like you noted. Luckily that has not occurred, yet.

I have always said, the important aspect of a breach, hack is not when. It's how fast and securely can you recover from it.

I feel sorry for those that were stuck at airports, a hospital or clinic, maybe trying to buy meds, a meal and so many others. I can't even guess the total economic impact this will have.

 

[SANZC02]

This outage is a reminder to companies not to become complacent in patch deployments. We always had a subset of systems covering each configuration that we applied patches to a week before we deployed to the entire infrastructure. This outage certainly was a major issue for Crowdstrike but each company has a certain amount of culpability as well based on their patching processes.

This is the reason why Rivian slow roles the OTAs in the beginning to minimize negative impact should an error slip through.

 

[iansriv]

Looks like the stock took a hit of almost $70 since Monday. Wonder how they will fair going forward?

Sponsored