you are viewing a single comment's thread
view the rest of the comments
[–] 21 points 2 years ago (1 child)

I appreciated the RiskyBiz episode with the Sentinel one guys where they go over all the ways this could have been prevented if they did real testing

Crowdstrike absolutely deserves the shit they're getting.

  • source
  • hideshow 2 child comments
  • [–] 4 points 2 years ago (1 child)

    Oh god. Sentinel one is horrible. If they're taking issue with your testing, you've really screwed the pooch

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 2 years ago (1 child)

    Horrible how? I've always thought they were pretty solid in the arena.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 2 years ago* (1 child)

    Their ftrace hooks caused all disk usage to be serialized, making your multi-core processor single-core when doing anything I/O bound

    We saw between 500% - 800% increases in build times with their software installed

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 years ago (1 child)

    Well, that's spectacular. What do you guys use now?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 2 years ago (1 child)

    We're still using them on machines where performance doesn't matter

    On build machines, they're on a special VLAN and don't have endpoint protection, but they only download from a protected mirror

  • source
  • parent
  • hideshow 2 child comments