So who else's day is made much more fun with Crowdstrike blowing up? We fortunately have limited exposure to Crowdstrike and it's all-hands-on-deck with the trickle-down impact. I can't imagine large firms with large remote workforces are doing.
July 2024 Crowdstrike fun
- Thread starter AlNipper49
- Start date
I couldn’t get a key made for my room at the AC Marriott in Worcester this morning.
I’ll get over it.
I’ll get over it.
I'm flying today, so it's been a real hoot. Allegiant flight was cancelled so I rebooked on Southwest immediately. Southwest's people were all smiles, and noted that they were entirely unaffected. I suppose I shouldn't be surprised.
Also, a medical provider I had to swing by had all their systems down, so they couldn't deal with me unless I'd happened to bring paper printouts of the stuff they could've normally just pulled up on the screen.
Good lesson on systems resilience, I guess. But man, how about the Crowdstrike engineering manager who approved the merge that broke everyone's system? He's gonna have to join a Tibetan monastery. Engineers make typos and bad code all the time, that's life, but it's irresponsible management that fails to invest enough in QA processes or code review.
Also, a medical provider I had to swing by had all their systems down, so they couldn't deal with me unless I'd happened to bring paper printouts of the stuff they could've normally just pulled up on the screen.
Good lesson on systems resilience, I guess. But man, how about the Crowdstrike engineering manager who approved the merge that broke everyone's system? He's gonna have to join a Tibetan monastery. Engineers make typos and bad code all the time, that's life, but it's irresponsible management that fails to invest enough in QA processes or code review.
The job was just recommended to me on LinkedIn so I assume he is gone.
My CRO thinks it is a sell opportunity so my next week got jammed. The biggest ;problem is people trusted Crowdstrike implicitly. You should never grab updates automatically from a vendor before running through a test environment. Crowdstrike played into this bullshit by spouting about stopping Day O exploits up until it was the greatest exploit in human history.
I hate cybersecurity vendor marketing ask @John Marzano Olympic Hero
Went to Dick's Sporting Goods in Medford at lunch to grab something I needed for tomorrow. Closed as their systems are down.
Play it Again had it in Stoneham. Should have went there first...
Play it Again had it in Stoneham. Should have went there first...
I was going to post some surgically removed memes but... what the Hell...
https://trending.ebaumsworld.com/pictures/the-funniest-crowdstrike-outage-memes/87574029/
https://trending.ebaumsworld.com/pictures/the-funniest-crowdstrike-outage-memes/87574029/
Add onto that, their public security posture seems to be based around marketing rather than good practices. Every time I've seen them "certify" something as secure it leaves more questions for me. Namely, they never ask (or atleast never publish) what processes that they identified along with tech controls. I could have the least secure machine ever with the best processes ever and it would be more secure than the most secure machine ever surrounded by the worst practices ever.
I drove to Starbucks and they were open but had a canned response prepared about being down. They then offered me free hot or iced coffee. I was happy.
Went to get my $3 drink. It felt like going to SBUX in the early 2000s: order at the cashier, baristas wrote shorthand your drink on the cup. The good ol' days
I got to admit Crowdstrike is doing an amazing job obfuscating how bad they fucked up. I am really worried this is not a wake up call to tighten their QA.
Looks like they have no plans to. Honestly it would be insane to purchase Crowdstrike going forward without them publicly addressing their QA shortcomings instead of blaming Microsoft.