Considering these security firms are all meant to be highly intelligent it amazes me they never seem to test things in multiple configs before deploying them and then when something breaks they act all surprised. Common sense is now a rarity.
Not really when you consider how many people out there know how to cripple or kill a company and there is nothing we can do to stop them.
To give you an idea, I know how to basically cripple the Virgin Media network for basically everyone North of Manchester and it would take days to fix it but I have no intention to ever do it, mainly because they carry blue light services and that would put peoples lives at risk, but also because I have no bad feelings towards them.
Also anyone who works there within the same department or related to that department will know the same exact thing and there really is nothing that Virgin can do to stop it, so they like many companies have to trust their previous employees to not do anything stupid.
Then you put in checks and privileges on everything to prevent just anybody from doing anything. Eventually one single person will have that control but you can massively mitigate and have roll backs.
This was fun to wake up to Friday. Took down most of our Windows servers and desktops. We were mostly recovered within 2 hours though so it wasn't too big a deal. I did have to restore 2 vms from backup as the servers were completely hosed. Annoying, but hopefully CrowdStrike improves their internal processes so this doesn't happen again.
I just learned that the CEO of CrowdStrike was also the CTO (or some other high position) of MacAfee when they had their huge debacle in the same vein ten years ago.
I just learned that the CEO of CrowdStrike was also the CTO (or some other high position) of MacAfee when they had their huge debacle in the same vein ten years ago.
This was fun to wake up to Friday. Took down most of our Windows servers and desktops. We were mostly recovered within 2 hours though so it wasn't too big a deal. I did have to restore 2 vms from backup as the servers were completely hosed. Annoying, but hopefully CrowdStrike improves their internal processes so this doesn't happen again.
Was great for me on the networking side of things. Since most of our customers were running around like headless chickens about this outage, it gave us in space to breathe and do some investigative work on some of our long standing tickets in peace and quiet