Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
jamesrt
1663 posts

Uber Geek
+1 received by user: 941

ID Verified
Trusted
Lifetime subscriber

  #3261911 20-Jul-2024 19:51
Send private message

neb:
1: if useriq == room_temp goto 1

 

Now this I will need to remember for later re-use; such a useful phrase!




Wheelbarrow01
1784 posts

Uber Geek
+1 received by user: 2638

Trusted
Chorus

  #3261916 20-Jul-2024 20:21
Send private message

Overall I’m really pleased with how my first day working at Crowdstrike went yesterday.
A couple of minor mistakes, no biggie…

 

πŸ˜‚πŸ€£πŸ˜‚


neb

neb
11294 posts

Uber Geek
+1 received by user: 10018

Trusted
Lifetime subscriber

  #3261924 20-Jul-2024 20:49
Send private message

When truth is stranger than fiction: Someone mentioned that this would hit Crowdstroke's stock price, and I commented that Equifax recovered its pre-breach value in 12 months and has skyrocketed since then:

 

Given Crowdstroke's newly-acquired global mindshare, it could recover even quicker than Equifax did: "Everyone depends on this company, their shares have gotta be undervalued until now".

 

And sure enough, in under a day:

 

https://www.forbes.com/sites/dereksaul/2024/07/19/crowdstrike-stock-tanks-15-set-for-worst-day-since-2022/

 

The CrowdStrike selloff is an “an overreaction to a temporary setback,” Rosenblatt analyst Catharine Trebnick wrote in a note to clients Friday. It’s a “compelling buying opportunity” as it creates a window for investors to buy into a high-quality, growth-oriented cybersecurity company at a discounted valuation,” Trebnick continued.

 

Is there any other industry where a company that caused global outages of banks, airlines, government departments, hospitals, trains, and buses is a "compelling buying opportunity"?




sudo
409 posts

Ultimate Geek
+1 received by user: 117


  #3261943 20-Jul-2024 23:25
Send private message

The memes are starting to flood social media πŸ™ƒ

 

Image


clinty
1201 posts

Uber Geek
+1 received by user: 402

Lifetime subscriber

  #3261954 21-Jul-2024 05:46
Send private message

Crowd strike have blogged the technical details of what happened

https://www.crowdstrike.com/blog/falcon-update-for-windows-hosts-technical-details/




Technical Details
On Windows systems, Channel Files reside in the following directory:

C:\Windows\System32\drivers\CrowdStrike\

and have a file name that starts with β€œC-”. Each channel file is assigned a number as a unique identifier. The impacted Channel File in this event is 291 and will have a filename that starts with β€œC-00000291-” and ends with a .sys extension. Although Channel Files end with the SYS extension, they are not kernel drivers.

Channel File 291 controls how Falcon evaluates named pipe1 execution on Windows systems. Named pipes are used for normal, interprocess or intersystem communication in Windows.

The update that occurred at 04:09 UTC was designed to target newly observed, malicious named pipes being used by common C2 frameworks in cyberattacks. The configuration update triggered a logic error that resulted in an operating system crash


Clint

Behodar
11095 posts

Uber Geek
+1 received by user: 6072

Trusted
Lifetime subscriber

  #3262006 21-Jul-2024 07:48
Send private message

sudo:

 

The memes are starting to flood social media πŸ™ƒ

 

Image

 

 

That's generous. We call it "Office 359" at work.


 
 
 
 

Shop now for Lego sets and other gifts (affiliate link).
johno1234
3352 posts

Uber Geek
+1 received by user: 2843


  #3262007 21-Jul-2024 07:56
Send private message

Wheelbarrow01:

Overall I’m really pleased with how my first day working at Crowdstrike went yesterday.
A couple of minor mistakes, no biggie…


πŸ˜‚πŸ€£πŸ˜‚



It's the best job I've had since that one where I did maintenance work on Northland power transmission towers!

SirHumphreyAppleby
2938 posts

Uber Geek
+1 received by user: 1860


  #3262009 21-Jul-2024 08:03
Send private message

clinty: Crowd strike have blogged the technical details of what happened

 

A bit light on detail there. The crash resulted from an access violation, dereferencing an incorrectly initialised pointer (not a NULL pointer as some reports indicate).

 

The code which caused the crash may well have been years old and only triggered by the new configuration.


kingdragonfly
11985 posts

Uber Geek
+1 received by user: 12867

Subscriber

  #3262010 21-Jul-2024 08:06
Send private message

Funny video. Good to show CEO.


Starlith
210 posts

Master Geek
+1 received by user: 82

Trusted

  #3262046 21-Jul-2024 11:03
Send private message

SirHumphreyAppleby:

 

clinty: Crowd strike have blogged the technical details of what happened

 

A bit light on detail there. The crash resulted from an access violation, dereferencing an incorrectly initialised pointer (not a NULL pointer as some reports indicate).

 

The code which caused the crash may well have been years old and only triggered by the new configuration.

 

 

Sounds like a Crowdstrike design and process failure on top of Microsoft having crap kernel boot safety all at once.

 

Even if Crowdstrike get the processes right I'm wondering if they would consider moving over to a memory safe language.

 

Microsoft really need to sort out the kernel driver boot to make it safer or even outright restrict it at a system level - something like a repeat kernel boot failure rollback should be the bare minimum. I remember Apple closing off System Level Kernel Extensions in BigSur (you can still do it but its a pita to set now) if you need full system access now it needs to be done at User level - Crowdstrike complied with that and it works just fine on macOS.


 
 
 
 

Shop now for Lego sets and other gifts (affiliate link).
davidcole
6099 posts

Uber Geek
+1 received by user: 1465

Trusted

  #3262099 21-Jul-2024 11:55
Send private message

AI will save us!!




Previously known as psycik

Home Assistant: Gigabyte AMD A8 Brix, Home Assistant with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Shelly Humidity and Temperature sensors
Media:Chromecast v2, ATV4 4k, ATV4, HDHomeRun Dual
Server
Host Plex Server 3x3TB, 4x4TB using MergerFS, Samsung 850 evo 512 GB SSD, Proxmox Server with 1xW10, 2xUbuntu 22.04 LTS, Backblaze Backups, usenetprime.com fastmail.com Sharesies Trakt.TV Sharesight 


k1w1k1d
1711 posts

Uber Geek
+1 received by user: 1305


  #3262165 21-Jul-2024 14:07
Send private message

Our IT Dept. has put out an email advising that we could possibly have a few BSoD issues tomorrow morning when we all start up our laptops.

 

Could be an interesting start to the week.


johno1234
3352 posts

Uber Geek
+1 received by user: 2843


  #3262233 21-Jul-2024 15:58
Send private message



About half the self service kiosks at the local Countdown.


Sorry about the photo… posted from my phone πŸ€”

Tinkerisk
4798 posts

Uber Geek
+1 received by user: 3660


  #3262403 21-Jul-2024 18:47
Send private message

neb:

 

Is there any other industry where a company that caused global outages of banks, airlines, government departments, hospitals, trains, and buses is a "compelling buying opportunity"?

 

 

Wait and see. We'll talk again when the alternatives have been implemented worldwide. The BSI (German Federal Office for Information Security) has already announced consequences for public infrastructure. πŸ˜‰

 

 





- NET: FTTH & VDSL, OPNsense, 10G backbone, GWN APs
- SRV: 12 RU HA server cluster, 0.1 PB storage on premise
- IoT:   thread, zigbee, tasmota, BidCoS, LoRa, WX suite, IR
- 3D:    two 3D printers, 3D scanner, CNC router, laser cutter


1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
Filter this topic showing only the reply marked as answer View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.