Hacker News Reader

Comment by Retr0id | Hacker News Reader

By the way, Crowdstrike has shared "technical details", discussed here: https://news.ycombinator.com/item?id=41013198

Unfortunately it's rather lacking in both technicality and detail.

Can’t say I’m surprised. Every major org will at least attempt to get compensation so playing entirely open cards is maybe not ideal

> We will update our findings in the root cause analysis as the investigation progresses.

Give them a minute.

Nope. Tech is specially protected by both sides of the isle. Why do you think there's no real or legally defined "engineering" happening? No red tape. No filter of quality, no accountability.

We have to legislate out big tech and start holding them accountable. Prison time for execs and significant fines is the correct and effective method.

Any org using a tech product should have a team reviewing contracts. Many contracts have financial penalties for not meeting SLAs. That's not going to be in the standard terms of service, but rather in an enterprise contract. Any large company just accepting standard ToS for business critical software is not doing their due diligence.

Most likely legal is highly involved in any postings about the incident

It doesn't have to be that technical. What I'm reading in there is that they had a logic flaw and their test cases nd testing processes aren't robust enough to catch major logic flaws. Not that surprising the way most orgs treat their testing.

Reply on news.ycombinator.com