At this point they are a threat actor. if you havent kicked their amateur-hour software out of your infrastructure by now, chances are good senior management and engineering have at least considered it formally.
https://en.wikipedia.org/wiki/CrowdStrike#Severe_outage_inci...
Unfortunately, the executive disconnect isn't new. It's actually uncommon that they care about the reality for end users and customers (which is antithical to my entire ethos, hence why I get paid the medium bucks). Why bother waking up and going to work everyday unless you are contributing in some way to sustaining a better future for everyone? It's actually great for marketing and it's already going to be a tough 100+ years from today for our children, even with our collective care.
P.s. People can be so selfish, it kind of breaks my brain but not really. Have you seen the CO2 emissions visualization from NASA this week? It was a wakeup call for me.
'Tremendous' NASA Video Shows CO2 Spewing from US into Earth's Atmosphere https://www.newsweek.com/nasa-video-carbon-dioxide-co2-emiss...
It's concerning.. and caught no traction.. http://news.ycombinator.com/item?id=41064029
“ For those who don't remember, in 2010, McAfee had a colossal glitch with Windows XP that took down a good part of the internet. The man who was McAfee's CTO at that time is now the CEO of Crowdstrike. The McAfee incident cost the company so much they ended up selling to Intel.”
so yeah, “leadership” (and that’s a loose term) doesn’t seem supremely concerned about much more than earnings
https://archive.is/20240724213623/https://www.barrons.com/ar...
Also what the fuck is a sales-facing CTO??
https://www.businessinsider.com/john-mcafee-tweet-said-his-s...
Recently ordered an HP laptop for some light work (not my startup), and when placing the order said don't include McAfee, that "I don't trust them", all just from some odor!
CloudStrike runs in kernel mode? No wonder there are problems; kernel mode sounds like more of a threat than a protection.
Sooooo, for my Web server(s), McAfee and CloudStrike are issues I get to ignore. Problems avoided and time, money, energy saved!! Simple.
I’m on #2 now and it’s been great. It’s like a breakup. “What was I thinking?”
Of course if it is representing your values and your values are purely mercenary, it’s really not going to change anything.
Is that what happens when a company has so many Sales Engineers that they become a parallel department from regular Engineering?
The product itself is a secondary cost-center, probably less important than even accounting.
Perhaps of a symptom of the "Everyone is in sales" brain damage so pervasive in companies now.
IMO somebody who managed to collapse the most important infrastructure on earth twice in as many decades - not a small feat, I have to admit - should be known by name to the general public, lest he'll get another chance at it.
And outages were not as global as news outlets made it look to be. Crowdstrike may have been ubiquitous in some countries, but almost absent in others. And still, crowdstrike or windows windows aren't global pieces of infrastructure.
Presumably it doesn't matter that much and isn't worth spending money/manpower on?
If the usefulness/quality of their software has no influence on their potential customers decision making process. why bother?
It would make much more sense to allocate any excess resources to the departments that do actually matter like sales and marketing.
Well, if they think any of the $20B of shareholder value lost recently has to do with the quality issues... Then perhaps they should reconsider. (keep in mind marketcap also represents their ability to raise capital in the future with more/less dillution)
Management often sees, “I have a dozen people on this.” When in fact the bus number was three, you laid one off, another quit and the third is sick or having life struggles.
Yeah, but doesn't MS have to sign every kernel mode driver? They've allowed Crowdstrike's foot gun to continue to live in the kernel.
Not a CS fanboy, but just wanted to suggest an alternative to sheer incompetence
1. They run inside a kernel.
2. They have many clients. (Incl. hospitals?)
This implies serious severity and impact of potential incidents, so in turn it should imply certain level of quality assurance process.
As we witnessed, it has glaring holes.
They know that mistakes can take out thousands and thousands of devices, therefore it is imperative they prioritize stability over rollout speed. They have more direct access to devices, than any 0-day would ever have, therefore there is a significant risk that they do more damage with an update than any 0-day ever could.
You have to remember, a 0-day could come to existence that threatens every system, but that usually happens once every couple of years (last one of that category was probably Blaster/I LOVE YOU). But CS risks of damaging the system every couple of hours with an update. Therefore, it should be tested to make absolutely sure it doesn't cause crashes.
IMHO, it was sheer negligence and incompetence.
> A Hacker News user claimed that
Nice to see Wikipedia has devolved even further into a dumpster fire in that they are now citing random HN posts as authoritative sources of facts.
If you disagree with this choice of source, you can flag this part as needing better sources. The simplest way to do so is to just leave a comment on the talk page.