Hacker News Reader

Comment by pdimitar | Hacker News Reader

> I think the good news, if it's incompetence, is that they can greatly reduce the risk of recurrence by improved processes and tooling.

Now let me give you the realistic news: every executive everywhere will just hand-wave this away with "it will not happen again anytime soon, or ever, right?" and be back to business as usual.

The extreme cost-cutting and allowing non-technical people to rule us is what is getting us into these messes every time. And humanity in its totality seems almost completely unable to learn.

View on HN

I think your cynicism may be misplaced in this particular situation.

CrowdStrike's ability to make sales is (I assume) very dependent on their appearance of trustworthiness.

Given the microscope they're under, and how serious some of their customers are, I think they'll need to make a convincing case that this kind of problem won't happen again.

Reminds me a little of Boeing, now that I think of it.

Did Boeing actually suffer in any measurable way?

I can accept your POV of me being too cynical btw. But I think it's also important to give you one extra nuance: everybody feels awkward after "accidents" like these and everybody is very willing to accept half-arsed explanations (that usually have zero details or guarantees of future better practices) and they just want to move on and forget about it.

Historically it seems that this approach wins in 99% of the cases.

I think it would take Crowdstrike doing five, six of these in a row before they tanked. Look at Boeing; two planes full of passengers died for quite scandalous reasons, followed up by a whole bunch of other engineering scandals, and while the value of Boeing shares took a 50% hit, the company's still in business, and people are still buying planes from them.

LastPass, Okta, Atlassian and SolarWinds show you can keep getting hacked repeatedly before you suffer any critical reputation damage in the market.

Reply on news.ycombinator.com