cloudstrike

[Thaddy]

Anybody already affected by the cloudstrike disaster?
tip: do NOT reboot today and turn off automatic updates until further notice.
This is a fire alarm...

                  and if you are a sysop do it quick, like NOW.

Do not reboot, do not upgrade and wait for more information.
If you are in the cloud and you reboot you have a huge problem.
Follow the news.

[cdbc]

Hi Thaddy
As far as I can see/read, it only affects micro$oft and the azure platform?!?
Luckily, most of the people I know, that uses that, are on vacation atm...
Surprising to see, just how many 'cookie-pots' micro$oft has got their dirty little hands in...
Am I missing something, should I be worried?!? I mean Unices run the most anyway...
Regards Benny

[theo]

Isn't that called crowdstrike?
Zurich Airport is also affected...

[Thaddy]

Here in the Netherlands all airports are affected, also my former employer is down and that *should* have a flick of a switch, because it is 4! times duplicate. (I guess they did not listen to me and tried to save money after I left, I designed that) The last way out is the development environment (level 4)
Live, backup, shadow, development. All live at all times, different routes.(and different providers with different networks and two co-locations)
That is a bank, and not a minor one....

[Thaddy]

Yes, Benny, seems only Azure, and a Windows upgrade: stop the install of that!
It will without question be fixed in hours, not weeks.
At least my consultancy fee has gone up for today 
Just enough to make me go out of bed...

[Thaddy]

Isn't that called crowdstrike?
Zurich Airport is also affected...

No it is cloudstrike, never trust journalists.

[theo]

No it is cloudstrike, never trust journalists.

In this case, I trust the journalists... 
https://en.wikipedia.org/wiki/CrowdStrike

[hansotten]

Isn't that called crowdstrike?
Zurich Airport is also affected...

No it is cloudstrike, never trust journalists.

and always check the source

https://www.crowdstrike.com/blog/statement-on-windows-sensor-update/

[gidesa]

So, seems a failure of a certain security product for cloud. Isn't?
Anyway, a warning on widely using cloud services.

[Curt Carpenter]

What do you charge your clients for fixing their "cloudstrike" problems Thaddy?

[MarkMLl]

Isn't that called crowdstrike?
Zurich Airport is also affected...

No it is cloudstrike, never trust journalists.

and always check the source

https://www.crowdstrike.com/blog/statement-on-windows-sensor-update/

Just a mo here. Haven't any of you guys ever seen a sauce bottle labelled "THE ORIGINAL, ACCEPT NO SUBSTITUTE" and so on? Why should a website named "crowdstrike" be believed when it claims to be "the original"... that could easily be spoofed for nefarious purposes.

OK, having got that out of the way: it does look as though in the current case Thaddy's made a mistake and the name actually /is/ Crowdstrike. However possibly the most useful confirmation of this is if you go to https://en.wikipedia.org/wiki/CloudStrike... whereupon you arrive at

CrowdStrike
From Wikipedia, the free encyclopedia
(Redirected from CloudStrike)

In other words Thaddy's is a common mistake. Having said which: more of us should be asking ourselves whether, in the case of one of our customers asking /why/ something was fouled up, we can deliver a contract-compliant answer rather than pointing at some combination of upstream "cloud" service providers who are undoubtedly NDA- and lawyer-heavy.

MarkMLl

[Curt Carpenter]

Just a mo here. Haven't any of you guys ever seen a sauce bottle labelled "THE ORIGINAL, ACCEPT NO SUBSTITUTE" and so on? Why should a website named "crowdstrike" be believed when it claims to be "the original"... that could easily be spoofed for nefarious purposes.

That's kind I suppose.  Still... 

Trust no one.  They really are all out to get you.  We are not leaving this ship until we know who stole the ice cream.  The New York TImes ("Airlines, hospitals and people’s computers were affected after CrowdStrike, a cybersecurity company, sent out a flawed software update.") is a tool of the liberal deep state,

etc. etc.

[440bx]

Aren't drivers supposed to be signed precisely to ensure they do _not_ cause problems like that ?

you can trust it... it's signed... what a joke!! (a rather bad one too.)

[MarkMLl]

Aren't drivers supposed to be signed precisely to ensure they do _not_ cause problems like that ?

No. They're signed so that if something goes wrong you know who is responsible.

Whether or not they manage to weasel out of it is another matter.

The lack of signing in ELF binaries and in the overall Linux ecosystem means that "Who is responsible for this?" is a far more thorny concern. But sorting out "the cloud" is much more pressing: I've seen enough evasion when there were only one or two companies involved, let alone the multitude when one tries to farm out ones Data Processing.

MarkMLl

[Thaddy]

Yes it was crowdstrike. Mea Culpa.
Free dinners for all my holidays....
I was involved too early (3:00 gmt)

But the fire alarm was correct.