Hacker News Reader

Comment by Ekaros | Hacker News Reader

It is one thing if these updates were in hands of the IT of the companies, but that this company just could automatically push them over is just weird.

I accept shared responsibility when there is some agreed deployment and such scenarios, but here? Nope it is on CrowdStrike...

View on HN

It was a virus definition update, not a software update. CrowdStrike will obviously update their virus definition deployment pre-flight check to prevent a situation like this from happening again, but a staged roll-out is out of the question. What do you want them to do? Expose everyone to new known viruses for longer?

> CrowdStrike will obviously update their virus definition deployment pre-flight check to prevent a situation like this from happening again

I don't consider them capable of preventing something like this from happening again.

No worries, it will happen again. That’s why they need to be euthanised.

> a staged roll-out is out of the question. What do you want them to do? Expose everyone to new known viruses for longer?

I think trading, say, small x (15 minutes, an hour?) time, to stage rather than blast might be an acceptable tradeoff given the visible consequences of not doing so.

If you hand your car keys to a drunk driver, it’s on both of you.

If I give root to a third party, then I’m liable for everything they do with that root.

The guy was not drunk when the key was given.

I’ve seen crowdstrike’s process. Seems drunk to me.

If I hand over my car keys to the same cleaning companies every month and all is fine always, except this last time, the cleaner cuts the break lines while cleaning the under side and I die in a crash.

That is a nonsensical comparison. Remote software updates and administration are common professional services that consumers of software cannot execute themselves.

The correct comparison would be handing your house keys to a licensed insect exterminator and the guy accidentally poisoning your family. You of course are not liable if a professional supplying you with a service messes up.

Crowdstrike doesn’t test their releases.

It’s like paying a licensed insect exterminator that uses random chemicals. They tell you this and you hand over the keys anyways.

An other view. Tesla does over-the-air updated you don't verify. It disables break, you drive car and kill someone due to this. Do you share responsibility? What if this happens while driving?

Reply on news.ycombinator.com