User Controls

Crowdstrike anti-malware breaking Windows PCs this morning

  1. #21
    ner vegas African Astronaut
    Originally posted by ner vegas might see if I can take one of the sys files apart

    ok, it's not the driver module itself that's failing, they pushed 'channel' files which are like config updates for the driver modules, and the updates were being generated with invalid formatting. that would explain why they're different; it's not the actual modules themselves that are being updated, they just don't bother to check the config updates.

    the channel files are only like 1kb
    The following users say it would be alright if the author of this post didn't die in a fire!
  2. #22
    ner vegas African Astronaut
    lol

    if this is right, they went to the trouble of building these 'secure' driver modules and signing them with microsoft only to load unsigned, unprotected data (maybe code, not sure) into them

    lmao
    The following users say it would be alright if the author of this post didn't die in a fire!
  3. #23
    Dirtbag African Astronaut
    Is it just windows 10?
  4. #24
    the man who put it in my hood Black Hole [miraculously counterclaim my golf]
    Who needs antivirus, just give a guy some meth to watch the active network connections in real time.

    I don't see how AI adds much value to network security. Isn't there some giant global computer data sharing thing that actively monitors the internet for malware trends and has existed since like 2005 and all the people involved share all the data? Which is basically almost AI itself at that point, and then adding another layer of AI on top of that seems kinda redundant
    VirusTotal: Owned by Google, VirusTotal aggregates many antivirus engines and tools to scan files and URLs. Users can upload files to be scanned, and the results are shared among participating security companies to improve detection capabilities.

    Cyber Threat Alliance (CTA): This is a group of cybersecurity providers who share threat intelligence data in real-time to improve their ability to respond to cyber threats.

    Microsoft Intelligent Security Graph (ISG): Microsoft uses a vast amount of data collected from various sources, including Windows Defender, to identify and respond to emerging threats. They share this intelligence with other security vendors.
  5. #25
    ner vegas African Astronaut
    Originally posted by Dirtbag Is it just windows 10?

    yeah

    if you don't use crowdstrike you don't need to worry about it though
  6. #26
    Dirtbag African Astronaut
    I don't trust myself to change OS to Linux yet. There seems to be a lot of "things you should know before installing" advice.
  7. #27
    ner vegas African Astronaut
    Originally posted by the man who put it in my hood I don't see how AI adds much value to network security. Isn't there some giant global computer data sharing thing that actively monitors the internet for malware trends and has existed since like 2005 and all the people involved share all the data? Which is basically almost AI itself at that point, and then adding another layer of AI on top of that seems kinda redundant

    they try to shoehorn AI into everything to build hype now, but the idea in this context is that the antivirus tracks how applications behave on your computer and sends that information back to their head office.

    the AI there analyses terabytes of this data to try to determine what activity is suspicious in order to detect malware-related behaviour early. before AI it'd be done manually; people would be paid to analyse this information, but AI can do it faster and cheaper (if not as accurately).
  8. #28
    the man who put it in my hood Black Hole [miraculously counterclaim my golf]
    windows drivers are pretty funky. As a lifelong windows user I just press the buttons and expect it to work. I only ever hear about them when it comes to stuff about malware or innocent things like fax drivers. I've never had an interest until recently

    Are windows drivers the big bucks?
  9. #29
    ner vegas African Astronaut
    Originally posted by the man who put it in my hood windows drivers are pretty funky. As a lifelong windows user I just press the buttons and expect it to work. I only ever hear about them when it comes to stuff about malware or innocent things like fax drivers. I've never had an interest until recently

    Are windows drivers the big bucks?

    for hacks sure, windows drivers effectively bypass the standard memory protection and run as SYSTEM
  10. #30
    Elbow African Astronaut
    they were trying to take down ATC as all the republicans flew home from the RNC it was an attack

    a cyberattack most foul

  11. #31
    This would have never happened if we'd have stuck with ZX spectrums, C64s and Amigas.
  12. #32
    the man who put it in my hood Black Hole [miraculously counterclaim my golf]
    https://futurism.com/the-byte/microsoft-recommends-rebooting-blue-screen

    HAVE YOU TRIED TURNING IT OFF AND ON AGAIN? AND THEN ON AGAIN? AND THEN OFF AGAIN? AND THEN...
    As the world is still reeling from a massive IT outage triggered by a faulty security software update by CrowdStrike that forced Windows machines to crash, Microsoft is trying to pick up the pieces.

    Worse yet, the bug needs to be addressed in person by IT professionals.

    And on top of all the chaos the outage has caused already, those professionals will need to be patient as they quite literally try to turn it off and then back on again — over and over.

    "We have received feedback from customers that several reboots (as many as 15 have been reported) may be required, but overall feedback is that reboots are an effective troubleshooting step at this stage," Microsoft wrote in an update.

    Really? 15 times? Depending on how ancient the Windows machine in question is, that could take an eternity.
  13. #33
    Donald Trump Black Hole
    I think the 15 reboots only applies to azure virtual machines
  14. #34
    the man who put it in my hood Black Hole [miraculously counterclaim my golf]
    According to the laws of science, hitting the computer hard enough in 0.01% of cases might resolve this issue
  15. #35
    It's in the name. Welcome to the New World Order.
  16. #36
    Donald Trump Black Hole


    TLDW, the few crowdstrike employees responsible for actually delivering the product didn't test shit, had an "it'll be right" attitude, and basically really fucked up. Regex makes zero sense to humans and should actually not be used ever.
  17. #37
    Charles Ex Machina African Astronaut
    dont trust any product that is involved in politics.

    problem solved.
  18. #38
    the man who put it in my hood Black Hole [miraculously counterclaim my golf]
    Originally posted by Donald Trump

    TLDW, the few crowdstrike employees responsible for actually delivering the product didn't test shit, had an "it'll be right" attitude, and basically really fucked up. Regex makes zero sense to humans and should actually not be used ever.

    women like confidence, at least they tried
  19. #39
    ner vegas African Astronaut
    Originally posted by Donald Trump

    TLDW, the few crowdstrike employees responsible for actually delivering the product didn't test shit, had an "it'll be right" attitude, and basically really fucked up. Regex makes zero sense to humans and should actually not be used ever.

    I fucking hate these videos that drag out for an hour

    the falcon sensor driver didn't bother validating the channel files and used regex to parse it into multiple parameters, they fucked up the formatting in one of the channel files, regex returned the wrong number of parameters and the actual driver shit the bed because it didn't bother validating the parameters either
  20. #40
    I think it's very likely this is all just bullshit and they deliberately took their systems offline to upgrade for the coming CBDC.
Jump to Top