Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
kingdragonfly
11989 posts

Uber Geek
+1 received by user: 12874

Subscriber

  #3262454 21-Jul-2024 21:38
Send private message

Similar to Musk, suffering from a bruised ego about his dumb cave submarine idea, calling a British caver saving Thai schoolboys, with zero evidence, a "pedo guy"

Quartz: Elon Musk is already blaming diversity initiatives for the massive CrowdStrike global tech outage

Elon Musk wasted no time in finding a convenient scapegoat for the global IT outage caused by a botched software update from cybersecurity firm CrowdStrike.

“Not very ‘bright’ right now, is it?” Musk wrote on X, formerly Twitter, Friday morning in reply to a more than two years old post from CrowdStrike.

In that post, the Austin, Texas-based firm said it was proud to be a “Gold Partner” of recruiting company Bright Network’s panel on diversity, equity, and inclusion (DEI).

It’s an on-brand pivot for the Tesla CEO, who has made diversity initiatives a frequent target for his criticism.

Tesla dropped language referencing diversity from its annual shareholder report just weeks after Musk tweeted that DEI is “just another word for racism.” The billionaire has also been criticized for claiming that Boeing’s issues with the 737 Max 9 were caused by hiring too many non-white pilots and factory workers.

In an interview with former CNN host Don Lemon in March, Musk accused Duke University of “literally” lowering its standards for students to promote more diverse candidates, although he could not provide any evidence for his assertion. Duke has said it has not lowered its standards and continues to rely on GPA and MCAT scores.
...



networkn
Networkn
32864 posts

Uber Geek
+1 received by user: 15455

ID Verified
Trusted
Lifetime subscriber

  #3262455 21-Jul-2024 21:52
Send private message

No accountability for him. You get yourself cancelled if you are almost anyone else saying that absolute tripe. 

 

He digsusts me. 


K8Toledo
1018 posts

Uber Geek
+1 received by user: 311


  #3262511 21-Jul-2024 22:17
Send private message

SirHumphreyAppleby:

 

clinty: Crowd strike have blogged the technical details of what happened

 

A bit light on detail there. The crash resulted from an access violation, dereferencing an incorrectly initialised pointer (not a NULL pointer as some reports indicate).

 

The code which caused the crash may well have been years old and only triggered by the new configuration.

 

 

Well that would be splitting hairs.

 

An uninitialized pointer is a pointer that has been declared but not assigned a valid memory address.

 

Is more or less the same as...

 

A null pointer is a pointer that is explicitly assigned the value of NULL to indicate that it intentionally points to no valid memory location. 

 

 

 

 

 

@SirHumphreyAppleby

 

How do you know it was an Access Violation?

 

 

 

 

 

 

 

 

 

 

 

 

 

 




neb

neb
11294 posts

Uber Geek
+1 received by user: 10018

Trusted
Lifetime subscriber

  #3262514 21-Jul-2024 22:31
Send private message

K8Toledo: Well that would be splitting hairs.

 

An uninitialized pointer is a pointer that has been declared but not assigned a valid memory address.

 

Is more or less the same as...

 

A null pointer is a pointer that is explicitly assigned the value of NULL to indicate that it intentionally points to no valid memory location. 

 

 

Not necessarily.  Some systems map the zero page to valid memory so NULL pointer derefs can be managed in a way other than producing a segfault.

 

Also, if you're going to get pedantic, NULL pointers have special semantics in C/C++.


K8Toledo
1018 posts

Uber Geek
+1 received by user: 311


  #3262531 22-Jul-2024 03:20
Send private message

K8Toledo: Well that would be splitting hairs.

 

An uninitialized pointer is a pointer that has been declared but not assigned a valid memory address.

 

Is more or less the same as...

 

A null pointer is a pointer that is explicitly assigned the value of NULL to indicate that it intentionally points to no valid memory location. 

 

 

neb:

 

Not necessarily.  Some systems map the zero page to valid memory so NULL pointer derefs can be managed in a way other than producing a segfault.

 

 

Well I would hope all systems map the zero page to valid memory, because if not - something is very, very wrong. :)

 

I think you may be confusing "null" pointers with the zero page or zeroed (free) memory? If not you'll need to expand on your comments above because I don't know what you mean.

 

Pointers are translated to real memory addresses by the CPU.  But a NULL pointer is a pointer that doesn't point to any memory location at all.

 

Zeroed pages are memory addresses emptied of previously stored data and filled with zeros, available for immediate use. Zeroing prevents processes seeing data stored by earlier processes that used that memory address.

 

The zero page is just the first address in RAM, as mapped by the CPU during the boot process.  Both zeroed pages and zero page should map to valid memory addresses in RAM (or page file if a PF exists).

 

It never ceases to amaze me the number of developers and coders, particularly those schooled by Microsoft that don't understand CPU Address Translation and assume that all pointers are valid addresses in RAM. 

 

 

 

And how am I being pedantic.....? 

 

 

 

 

 

The desktop is 4670K with 578Mb reserved for the onboard GPU. No pagefile.

 

On the right you can see the zeroed "pages" are real addresses in RAM

 


SirHumphreyAppleby
2939 posts

Uber Geek
+1 received by user: 1860


  #3262533 22-Jul-2024 06:47
Send private message

K8Toledo:

 

@SirHumphreyAppleby

 

How do you know it was an Access Violation?

 

 

Someone posted a crash dump. The crash occurred dereferencing a non-NULL pointer to invalid memory, resulting in error code 0xc0000005 (Access Violation).

 

The memory address was quite low, suggesting an offset added to a NULL pointer. C/C++ programmers often checks for NULL input, but if you have an error resulting in a NULL pointer, fail to check for it and immediately add an offset (e.g. fixed header size), later code is unlikely to pick it up.


 
 
 

Want to support Geekzone and browse the site without the ads? Subscribe to Geekzone now (monthly, annual and lifetime options).
Goosey
3016 posts

Uber Geek
+1 received by user: 871

Subscriber

  #3262534 22-Jul-2024 06:59
Send private message

johno1234:
Wheelbarrow01:

 

Overall I’m really pleased with how my first day working at Crowdstrike went yesterday.
A couple of minor mistakes, no biggie…

 

 

 

😂🤣😂

 



It's the best job I've had since that one where I did maintenance work on Northland power transmission towers!

 

 

 

you really like end of the week tasks….was that job before the one you had at foodstuffs when there was a dodgy software update rolled out on a Friday afternoon which crippled each and every new world and pak n save…


Behodar
11099 posts

Uber Geek
+1 received by user: 6082

Trusted
Lifetime subscriber

  #3262550 22-Jul-2024 08:15
Send private message

Well, I didn't even know we used this thing at work, but everything's down and evidently IT must have been accosted on the way into the building because they ain't here yet...

 

Correction: It seems to be affecting maybe 10% of computers here.


SirHumphreyAppleby
2939 posts

Uber Geek
+1 received by user: 1860


  #3262552 22-Jul-2024 08:20
Send private message

CrowdStrike IT Outage Explained by a Windows Developer

 


freitasm
BDFL - Memuneh
80653 posts

Uber Geek
+1 received by user: 41045

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3262556 22-Jul-2024 08:29
Send private message

Behodar:

 

Well, I didn't even know we used this thing at work, but everything's down and evidently IT must have been accosted on the way into the building because they ain't here yet...

 

 

I think they've been there already and decided to do a runner.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


Behodar
11099 posts

Uber Geek
+1 received by user: 6082

Trusted
Lifetime subscriber

  #3262560 22-Jul-2024 08:34
Send private message

One of the guys turned up a few minutes ago, someone's laptop in hand. I think it's going to be a busy day for him!


 
 
 

Shop now on AliExpress (affiliate link).
NickMack
977 posts

Ultimate Geek
+1 received by user: 831

Trusted
In memoriam
Lifetime subscriber

  #3262564 22-Jul-2024 08:57
Send private message

BarTender: I do firmly blame much of the situation on Microsoft being unable to supply an OS with sufficient hardening steps that a separate vendor is required for EDR rather than the OS being sufficient.
I also blame IT Security management requirements in some industries such as Telco, Fintech, Medical and Aviation that rightfully have vulnerability policies that if a zero day drops it needs to be patched immediately before you get pwned and having mitigation tools to reduce your risk surface on the unknown unknowns. All I need to say is “log4j, OpenSSL shell shock and xz” where similar issues that impact Linux hosts.

The main difference is where complexity and the environment grows and managers don’t want to pay staff to be available 24/7 for remediation that tools will come in place to replace humans with automation… and when those tools are deployed at scale this could very easily have happened on any platform.

Until there is a point where human intervention is considered an asset not a liability in critical technical infrastructure services I can see this happening again. Perhaps not on this scale… but I can see how it could easily happen again even without the possibility of a supply chain attack.

 

As you state, the foundational cause is the architectural decisions made by Microsoft around the kernel and how applications interact/control plain allowing an application to brick and O/S vs. terminate/disallow. Dont be fooled into believing this is only a MS risk/issue..... Architecture always is a trade off of many things.

 

There's multiple lessons here for all, from Vendors, customers, MSPs etc. - As always Security is about defense in depth, layers, acceptable risk, $$, culture, diversity of AV products etc.

 

Nick





Behodar
11099 posts

Uber Geek
+1 received by user: 6082

Trusted
Lifetime subscriber

  #3262627 22-Jul-2024 09:40
Send private message

Apparently it's not the first time that Crowdstrike has pushed out updates without testing them. Apparently they learned nothing last time!


networkn
Networkn
32864 posts

Uber Geek
+1 received by user: 15455

ID Verified
Trusted
Lifetime subscriber

  #3262634 22-Jul-2024 09:56
Send private message

Behodar:

 

Apparently it's not the first time that Crowdstrike has pushed out updates without testing them. Apparently they learned nothing last time!

 

 

As with all things, when the consequences outweigh the benefits, then action and change occurs. Until then, BAU.

 

If they get sued, and they lose, and claim on their insurance, they will either be uninsurable or insured on a much more restrictive set of policies which ensure change management is done differently. 

 

There was language in a customers recent insurance renewal, which covered off change management and was at least 6 questions. It even covered third party IT changes!

 

 

 

 


lchiu7
6521 posts

Uber Geek
+1 received by user: 543

Trusted

  #3262647 22-Jul-2024 10:19
Send private message

Well Southwest Airlines dodged a bullet

 

 

 

https://www.forbes.com/sites/tedreed/2024/07/20/meltdown-what-meltdown-southwest-flew-on-time-all-day/

 

 

 

They must be happy :-)


1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.