CrowdStrike Outage Exposes Windows Risks: Why Linux is the Better Choice

[gvisoc]

I don't really agree with this take. Linux systems were unaffected because the Linux module didn't have the same bug (nor the macOS' one), but the architecture and the problem would be exactly the same had the Linux module have a simple bug when parsing the update file.

Indeed, there was a similar mass-outage for Linux systems caused by CrowdStrike back in April.

CrowdStrike update previously crippled Linux systems, but it went unnoticed

www.newsbytesapp.com

I don't want to sound negative or "loyal to Microsoft", but proper credit to the facts is due.

In other area, I came across a video of a retired Microsoft engineer which is pretty good (both the video and the channel, is a channel I really enjoy), just in case anyone were interested in knowing what the actual problem was.

 

[Condobloke]

@gvisoc ....well explained on your part, and also on the part of Dave Plummer.

That guy is good !...he actually makes sense.....and the 'problem' was sorted without fuss.

 

[gvisoc]

He is very good

 

[dos2unix]

Indeed, there was a similar mass-outage for Linux systems caused by CrowdStrike back in April.

It was my understanding this only affected older kernels. 6.1.x and older.

 

[KGIII]

He is very good

He's one of my favorites.

 

[Aristarchus]

This is a nice explanation why Linux would not help in this particular ouage:

Would Linux Have Helped To Avoid The CrowdStrike Catastrophe?

Opinion: Millions of critical computers and servers around the world went down because CrowdStrike, a major cybersecurity firm that offers enterprise

fosspost.org

and this

CrowdStrike's Falcon Sensor also linked to Linux kernel panics and crashes

CrowdStrike's now-infamous Falcon Sensor software, which last week led to widespread outages of Windows-powered computers, has also caused crashes of...

cyber.vumetric.com

So it does not look like ANY single OS will help
What I red is that as long as Crowdstrike module is loaded (requirement - regulatory/compliance. Crowdstrike management system is used to detect malware and indicators of compromise (IOC’s) across your entire network) kernel will crash. I don't think that newer kernels would help because it needs mitigations for a faulty kernel module causing kernel panics.

 

[CaffeineAddict]

This is a nice explanation why Linux would not help in this particular ouage

A good thing is that things like CrowdStrike aren't enforced to Linux systems and I'm not sure if it's needed either.
To my understanding companies opt-in for use of CrowdStrike in both Windows, Linux or Mac?
I think they'll now opt-out on a larger scale.

In any case I think MS or EU (according to MS) isn't to blame but CrowdStrike is.

 

[Aristarchus]

A good thing is that things like CrowdStrike aren't enforced to Linux systems and I'm not sure if it's needed either.
To my understanding companies opt-in for use of CrowdStrike in both Windows, Linux or Mac?
I think they'll now opt-out on a larger scale.

In any case I think MS or EU (according to MS) isn't to blame but CrowdStrike is.

This is not how it works. As I mentioned EU require Crowdstrike management system. US, Australia use it to to make it unified. If Linux servers are connected then these are required to use Crowdstrike module.. and they crash.
Overall this is Crowdsrtrike fault not any OS. This is why Linux systems are also reported to crash.

The fact that your Linux is fine means that you are not required to use these modules. Nothing special about it. Any OS is fine too for the same reason.

 

[Trynna3]

Oh, here it is where I saw this man previously.
Also David Plummer

 

[Condobloke]

My 'sad' icon on the post above is aimed at the 2nd video, which is disparaging of Dave Plummer

 

[Trynna3]

My 'sad' icon on the post above is aimed at the 2nd video, which is disparaging of Dave Plummer

You have a right for your views. I just find it strange that he keeps cashing in from his Microsoft career in the past, when he left Microsoft and started scamming people. He refuses to answer for his blunter. He was sued for this in 2006. Maybe we see things differently.

 

[CaffeineAddict]

Oh, here it is where I saw this man previously.
Also David Plummer

It's not that hard to believe, I didn't chase any links in the video description but who could know to do it better than a kernel developer lol

 

[gvisoc]

I didn’t know that of his past, and it’s worth knowing.

On that same note I also saw that he paid everything the sentence called for, and the victims were able to get refunded. All that can be fact-checked in the attorney webpage itself.

I am not sure what kind of justice system we believe in, if after years of admitting guilt and settling a case we’re still playing down everything a man does, like they are the same person with the same intentions as 18 years ago,

It’s not like he ate puppies, pushed elders to ponds or, worse, coded Windows Vista after that, I mean.

 

[Condobloke]

I am not sure what kind of justice system we believe in, if after years of admitting guilt and settling a case we’re still playing down everything a man does, like they are the same person with the same intentions as 18 years ago,

Amen to that.
If we were all being held to account in public forums for happenings 18 years old (which had been rectified/settled, legally).....we may all be in a state of disarray.
Growing from previous mistakes, is a great sign of maturity.

 

[Trynna3]

I didn’t know that of his past, and it’s worth knowing.

On that same note I also saw that he paid everything the sentence called for, and the victims were able to get refunded. All that can be fact-checked in the attorney webpage itself.

I am not sure what kind of justice system we believe in, if after years of admitting guilt and settling a case we’re still playing down everything a man does, like they are the same person with the same intentions as 18 years ago,

It’s not like he ate puppies, pushed elders to ponds or, worse, coded Windows Vista after that, I mean.

I get your point, but there is that shadow and he refuses to own it. Scammer once... he might have changed his ways, obviously, but he literally left Microsoft to earn a bigger buck, because his skill apparently didn't reward him enough. Now he is mining on his previous past and ignores when people ask him about his scamming past. At least say: yes, I made a mistake, not doing it anymore. Before I learned this about him, I already had an impression he was sticking his Microsoft expertise too much to my face. Now I understand why.
If you know stuff, you know it, it is obvious and people see it.

 

[gvisoc]

I understand. And don't get me wrong, I wouldn't buy anything from him, but that doesn't make his videos bad or inaccurate.

 

[CaffeineAddict]

I am not sure what kind of justice system we believe in, if after years of admitting guilt and settling a case we’re still playing down everything a man does, like they are the same person with the same intentions as 18 years ago,

I agree with you completely, he paid the fine and should no longer be judged or poked for his past, however this world is very unforgivable.
It's 2024 olympics and there is a player that served a sentence for doing bad things to a child (not to say what he did, you google it), yet the media is full of BS against him as if he never served his prison and despite him saying to be sorry.

Now this is off topic but so much about justice, once you're bad you're bad until you die, so this world works.

 

[The Duck]

"Believe Nothing You Read."

"Believe Nothing You Hear."

"The World Is Full Of Lairs"

"Trust No One"



@Condobloke And you think you're cynical.

The fiber company at some stage will likely tick you off as well,.,,,,it seems to be the nature of the beasts.....they just cannot help themselves. All talk, and in the long run, the story alters/changes/cops a twist that was not present initially...

I am not trusting of anyone associated with the telco business.

I am also as cynical as all hell.

In writing, or it does not happen

Above quote from this thread link.

https://linux.org/threads/i-am-pretty-interested-and-waiting-to-get-excited.51129/

 

[MikeRocor]

"Believe Nothing You Read."

"Believe Nothing You Hear."

"The World Is Full Of Lairs"

"Trust No One"

@Condobloke And you think you're cynical.

I understand what you're saying...

... but, alas, I don't believe it.

 

[finallyIgotLinuxed]

Wow, if the government's budget is so low to not be able to pay for latest Windows then it's yet another reason to switch to Linux which is free.

How can you have a budget when your in debt up to your eyeballs? Besides What government goes for an ounce of prevention when you can spend for a pound of cure! Plus can you imagine the Windows lobbyists if they got wind of the government thinking of the switch.