User Controls
Crowdstrike anti-malware breaking Windows PCs this morning
-
2024-07-19 at 4:29 PM UTC
Originally posted by ner vegas might see if I can take one of the sys files apart
ok, it's not the driver module itself that's failing, they pushed 'channel' files which are like config updates for the driver modules, and the updates were being generated with invalid formatting. that would explain why they're different; it's not the actual modules themselves that are being updated, they just don't bother to check the config updates.
the channel files are only like 1kb -
2024-07-19 at 4:38 PM UTClol
if this is right, they went to the trouble of building these 'secure' driver modules and signing them with microsoft only to load unsigned, unprotected data (maybe code, not sure) into them
lmao -
2024-07-19 at 4:39 PM UTCIs it just windows 10?
-
2024-07-19 at 4:40 PM UTCWho needs antivirus, just give a guy some meth to watch the active network connections in real time.
I don't see how AI adds much value to network security. Isn't there some giant global computer data sharing thing that actively monitors the internet for malware trends and has existed since like 2005 and all the people involved share all the data? Which is basically almost AI itself at that point, and then adding another layer of AI on top of that seems kinda redundantVirusTotal: Owned by Google, VirusTotal aggregates many antivirus engines and tools to scan files and URLs. Users can upload files to be scanned, and the results are shared among participating security companies to improve detection capabilities.
Cyber Threat Alliance (CTA): This is a group of cybersecurity providers who share threat intelligence data in real-time to improve their ability to respond to cyber threats.
Microsoft Intelligent Security Graph (ISG): Microsoft uses a vast amount of data collected from various sources, including Windows Defender, to identify and respond to emerging threats. They share this intelligence with other security vendors. -
2024-07-19 at 4:41 PM UTC
-
2024-07-19 at 4:43 PM UTCI don't trust myself to change OS to Linux yet. There seems to be a lot of "things you should know before installing" advice.
-
2024-07-19 at 4:44 PM UTC
Originally posted by the man who put it in my hood I don't see how AI adds much value to network security. Isn't there some giant global computer data sharing thing that actively monitors the internet for malware trends and has existed since like 2005 and all the people involved share all the data? Which is basically almost AI itself at that point, and then adding another layer of AI on top of that seems kinda redundant
they try to shoehorn AI into everything to build hype now, but the idea in this context is that the antivirus tracks how applications behave on your computer and sends that information back to their head office.
the AI there analyses terabytes of this data to try to determine what activity is suspicious in order to detect malware-related behaviour early. before AI it'd be done manually; people would be paid to analyse this information, but AI can do it faster and cheaper (if not as accurately). -
2024-07-19 at 4:46 PM UTCwindows drivers are pretty funky. As a lifelong windows user I just press the buttons and expect it to work. I only ever hear about them when it comes to stuff about malware or innocent things like fax drivers. I've never had an interest until recently
Are windows drivers the big bucks? -
2024-07-19 at 4:53 PM UTC
Originally posted by the man who put it in my hood windows drivers are pretty funky. As a lifelong windows user I just press the buttons and expect it to work. I only ever hear about them when it comes to stuff about malware or innocent things like fax drivers. I've never had an interest until recently
Are windows drivers the big bucks?
for hacks sure, windows drivers effectively bypass the standard memory protection and run as SYSTEM -
2024-07-19 at 7:04 PM UTC
-
2024-07-19 at 8:24 PM UTCThis would have never happened if we'd have stuck with ZX spectrums, C64s and Amigas.
-
2024-07-21 at 11:08 AM UTChttps://futurism.com/the-byte/microsoft-recommends-rebooting-blue-screen
HAVE YOU TRIED TURNING IT OFF AND ON AGAIN? AND THEN ON AGAIN? AND THEN OFF AGAIN? AND THEN...
As the world is still reeling from a massive IT outage triggered by a faulty security software update by CrowdStrike that forced Windows machines to crash, Microsoft is trying to pick up the pieces.
Worse yet, the bug needs to be addressed in person by IT professionals.
And on top of all the chaos the outage has caused already, those professionals will need to be patient as they quite literally try to turn it off and then back on again — over and over.
"We have received feedback from customers that several reboots (as many as 15 have been reported) may be required, but overall feedback is that reboots are an effective troubleshooting step at this stage," Microsoft wrote in an update.
Really? 15 times? Depending on how ancient the Windows machine in question is, that could take an eternity. -
2024-07-21 at 11:15 AM UTCI think the 15 reboots only applies to azure virtual machines
-
2024-07-21 at 1:02 PM UTCAccording to the laws of science, hitting the computer hard enough in 0.01% of cases might resolve this issue
-
2024-07-21 at 3:38 PM UTCIt's in the name. Welcome to the New World Order.
-
2024-08-09 at 1:38 PM UTC
TLDW, the few crowdstrike employees responsible for actually delivering the product didn't test shit, had an "it'll be right" attitude, and basically really fucked up. Regex makes zero sense to humans and should actually not be used ever. -
2024-08-09 at 1:48 PM UTCdont trust any product that is involved in politics.
problem solved. -
2024-08-09 at 2:11 PM UTC
Originally posted by Donald Trump
TLDW, the few crowdstrike employees responsible for actually delivering the product didn't test shit, had an "it'll be right" attitude, and basically really fucked up. Regex makes zero sense to humans and should actually not be used ever.
women like confidence, at least they tried -
2024-08-09 at 2:22 PM UTC
Originally posted by Donald Trump
TLDW, the few crowdstrike employees responsible for actually delivering the product didn't test shit, had an "it'll be right" attitude, and basically really fucked up. Regex makes zero sense to humans and should actually not be used ever.
I fucking hate these videos that drag out for an hour
the falcon sensor driver didn't bother validating the channel files and used regex to parse it into multiple parameters, they fucked up the formatting in one of the channel files, regex returned the wrong number of parameters and the actual driver shit the bed because it didn't bother validating the parameters either -
2024-08-09 at 3:25 PM UTCI think it's very likely this is all just bullshit and they deliberately took their systems offline to upgrade for the coming CBDC.