▲ 598 ▼ crowdStrikeIsAVerbNow (lemmy.world) submitted 2 years ago by aptgetrekt@lemmy.world to c/programmerhumor@lemmy.ml 51 comments fedilink hide all child comments
[+] Tartas1995@discuss.tchncs.de 24 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] InfiniteFlow@lemmy.world -2 points 2 years ago (3 children) OTOH, if you build a playlist manager for playlists everyone can add to, you make sure nothing anyone adds will break it… permalink fedilink source parent hideshow 6 child comments replies: [–] Eheran@lemmy.world 6 points 2 years ago Except that the playlists are super complex and there is no way to make sure. Like building an engine and having to make sure that no 3rd party accessory will break it. Like the parented "sand injector". permalink fedilink source parent [–] Serinus@lemmy.world 6 points 2 years ago They were legally not allowed to as part of an agreement to not be s monopoly and allow competition. permalink fedilink source parent [+] Tartas1995@discuss.tchncs.de 5 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] pHr34kY@lemmy.world 3 points 2 years ago (1 child) What do you think WHQL is? The problem with CrowdStrike's solution is that they got csagent.sys driver signed by WHQL, and the driver will download p-code from the internet and execute it. This allows them to push out changes without waiting for Microsoft approval. The biggest problem occurs when you don't sanitize your inputs and someone accidentally uploads a blank file padded with zeroes. The driver dereferences a null value, and crashes your system. Hard. permalink fedilink source parent hideshow 2 child comments replies: [+] Tartas1995@discuss.tchncs.de 2 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] pHr34kY@lemmy.world 3 points 2 years ago Ahh. Approving every piece of software would make them... Apple. You did say "driver", and Microsoft typically approves every single driver on the majority of PCs. permalink fedilink source parent
[–] InfiniteFlow@lemmy.world -2 points 2 years ago (3 children) OTOH, if you build a playlist manager for playlists everyone can add to, you make sure nothing anyone adds will break it… permalink fedilink source parent hideshow 6 child comments replies: [–] Eheran@lemmy.world 6 points 2 years ago Except that the playlists are super complex and there is no way to make sure. Like building an engine and having to make sure that no 3rd party accessory will break it. Like the parented "sand injector". permalink fedilink source parent [–] Serinus@lemmy.world 6 points 2 years ago They were legally not allowed to as part of an agreement to not be s monopoly and allow competition. permalink fedilink source parent [+] Tartas1995@discuss.tchncs.de 5 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] pHr34kY@lemmy.world 3 points 2 years ago (1 child) What do you think WHQL is? The problem with CrowdStrike's solution is that they got csagent.sys driver signed by WHQL, and the driver will download p-code from the internet and execute it. This allows them to push out changes without waiting for Microsoft approval. The biggest problem occurs when you don't sanitize your inputs and someone accidentally uploads a blank file padded with zeroes. The driver dereferences a null value, and crashes your system. Hard. permalink fedilink source parent hideshow 2 child comments replies: [+] Tartas1995@discuss.tchncs.de 2 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] pHr34kY@lemmy.world 3 points 2 years ago Ahh. Approving every piece of software would make them... Apple. You did say "driver", and Microsoft typically approves every single driver on the majority of PCs. permalink fedilink source parent
[–] Eheran@lemmy.world 6 points 2 years ago Except that the playlists are super complex and there is no way to make sure. Like building an engine and having to make sure that no 3rd party accessory will break it. Like the parented "sand injector". permalink fedilink source parent
[–] Serinus@lemmy.world 6 points 2 years ago They were legally not allowed to as part of an agreement to not be s monopoly and allow competition. permalink fedilink source parent
[+] Tartas1995@discuss.tchncs.de 5 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] pHr34kY@lemmy.world 3 points 2 years ago (1 child) What do you think WHQL is? The problem with CrowdStrike's solution is that they got csagent.sys driver signed by WHQL, and the driver will download p-code from the internet and execute it. This allows them to push out changes without waiting for Microsoft approval. The biggest problem occurs when you don't sanitize your inputs and someone accidentally uploads a blank file padded with zeroes. The driver dereferences a null value, and crashes your system. Hard. permalink fedilink source parent hideshow 2 child comments replies: [+] Tartas1995@discuss.tchncs.de 2 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] pHr34kY@lemmy.world 3 points 2 years ago Ahh. Approving every piece of software would make them... Apple. You did say "driver", and Microsoft typically approves every single driver on the majority of PCs. permalink fedilink source parent
[–] pHr34kY@lemmy.world 3 points 2 years ago (1 child) What do you think WHQL is? The problem with CrowdStrike's solution is that they got csagent.sys driver signed by WHQL, and the driver will download p-code from the internet and execute it. This allows them to push out changes without waiting for Microsoft approval. The biggest problem occurs when you don't sanitize your inputs and someone accidentally uploads a blank file padded with zeroes. The driver dereferences a null value, and crashes your system. Hard. permalink fedilink source parent hideshow 2 child comments replies: [+] Tartas1995@discuss.tchncs.de 2 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] pHr34kY@lemmy.world 3 points 2 years ago Ahh. Approving every piece of software would make them... Apple. You did say "driver", and Microsoft typically approves every single driver on the majority of PCs. permalink fedilink source parent
[+] Tartas1995@discuss.tchncs.de 2 points 2 years ago (1 child) [deleted] permalink fedilink source parent hideshow 2 child comments replies: [–] pHr34kY@lemmy.world 3 points 2 years ago Ahh. Approving every piece of software would make them... Apple. You did say "driver", and Microsoft typically approves every single driver on the majority of PCs. permalink fedilink source parent
[–] pHr34kY@lemmy.world 3 points 2 years ago Ahh. Approving every piece of software would make them... Apple. You did say "driver", and Microsoft typically approves every single driver on the majority of PCs. permalink fedilink source parent
