Re: Crowdstrike fiasco

Subject	Re: Crowdstrike fiasco
Newsgroups	comp.os.linux.misc
References	<v7dbfl$2u3ri$1@dont-email.me> <14650d94-4742-6c3f-9c73-33e7468106c5@example.net> <v7gevu$p388$1@matrix.hispagatos.org> <v7gn63$3jnfn$2@dont-email.me> <v7gtpi$3kqj0$1@dont-email.me>
From	"186282@ud0s4.net" <186283@ud0s4.net>
Organization	vector apex
Date	2024-07-27 02:12 -0400
Message-ID	<Y9GdnZjCkY5HEjn7nZ2dnZfqnPidnZ2d@earthlink.com> (permalink)

Show all headers | View raw

On 7/20/24 1:57 PM, Rich wrote:
> The Natural Philosopher <tnp@invalid.invalid> wrote:
>> On 20/07/2024 14:44, rek2 hispagatos wrote:
>>> On 2024-07-19, D <nospam@example.net> wrote:
>>>>
>>>>
>>>> On Fri, 19 Jul 2024, Woozy Song wrote:
>>>>
>>>>> Curiously, when I made a post to Reddit linux group, it got deleted
>>>>> immediately. I thought they would be gloating that Windows got shafted.
>>>>>
>>>>
>>>> I'm gloating! I repeatedly tell a potential customer to change from
>>>> windows, and I think so far they asked me for an offer and an opinion 3
>>>> times (they had 3 security incidents), and yet they have never purchased
>>>> my services and they keep running into these problems. I'm gloating so
>>>> much. Sadly I don't think they will ever switch from their beloved
>>>> Microsoft though.
>>>>
>>>> I do use them often as an example of what happens if you have a crappy
>>>> IT-manager so I do derive benefits from their incompetence though! =)
>>>>
>>>
>>>
>>> +1 I hope this serves as a lesson.
>>
>> No, it wont.
>>
>> You dont understan middle management in a company.
>> The IT managers career is best served by spending shitloads of money
>> with a company like crowdstrike which offers impressive legal guarantees
>> in its contracts.
>> Not by implementing a policy with some 'nerdy operating system' that his
>> boss doesn't know how to use. And developing an IT department to service
>> and support it.
> 
> You can tell those who have never worked with/in/near a large corporate
> bureaucracy or govt bureaucracy IT department.  Those who have never
> seen behind the curtain believe this will result in some kind of
> change.
> 
> Those who have (and it does appear you have) recognize crowdstrike for
> what it really is (hint, it is not for "securing" the endpoint systems
> -- that is, at best, a secondary outcome).  Crowdstrike's real purpose
> is to provide the IT bureaucracy with "risk insurance" (i.e.,
> Crowdstrike is really an "insurance plan", even if not presented that
> way) such that the IT folk can check a checkbox on their quarterly
> security audit forms that indicates they have "security scanning
> software" installed.  It additionally provides those same IT
> bureaucracy folks with a CYA such that if they happen to be
> hacked/exploited, they can CYA and shift blame to Crowdstrike and away
> from themselves.
> 
> Any "security" Crowdstrike provides is secondary to this main purpose,
> that of being an "insurance plan" onto which the IT bureaucracy members
> can shift blame should some hack occur.
> 
> So in the end, because the next quarters audit's checkboxes will still
> require "security scanning software" be installed, when next quarter
> arrives, and those forms get filled out again, Crowdstrike will still
> be installed, so those IT folks can check the "blame shifting checkbox"
> on the audit form and magically become "secure" for another quarter.


   The M$-suckers who replaced me after I retired were of
   exactly that mentality. Wonderful cloud stuff AND the
   providers offer such WONDERFUL guarentees ! All the
   modern boxes checked - "Ain't OUR fault !".

   Control, real 'security', comprehension, totally out the
   window (ha ha). Shit, they could barely even program five
   lines of Python and 'C' source  may as well be writ
   in hieroglyphics.

   Dunno if the CS fiasco screwed them ... I'll have to find
   a reason to call and see. There IS a certain satisfaction
   in "TOLD ya so !"  :-)

   And if it wasn't CS last week it'll be something ELSE
   next week. Their boxes WILL lock, their 'cloud' WILL
   dissipate. It is clear that bad actors can get into
   most ANYTHING 'cloudy' these days. Just a matter of time.
   Tick, tick, tick ...........

   HOME-hosted data/backups/vital-apps/firewalls centered
   on Unix/Linux boxes is STILL the best way to go. Save
   the 'cloud' for like aux backups (and pre-encrypt as
   you should give more faith to UFO Butt-Prober testimony
   than their promises to keep yer data confidential).

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Crowdstrike fiasco Woozy Song <suzyw0ng@outlook.com> - 2024-07-19 17:26 +0800
  Re: Crowdstrike fiasco D <nospam@example.net> - 2024-07-19 12:41 +0200
    Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-19 12:59 +0100
      Re: Crowdstrike fiasco Sirius <sirius@trudheim.com> - 2024-07-19 15:31 +0200
        Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-20 07:06 +0000
          Re: Crowdstrike fiasco Rob van der Putten <rob@sput.nl> - 2024-07-21 11:11 +0200
            Re: Crowdstrike fiasco Steve Hayes <hayesstw@telkomsa.net> - 2024-07-21 12:19 +0200
              Re: Crowdstrike fiasco rbowman <bowman@montana.com> - 2024-07-21 18:44 +0000
            Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-21 21:50 +0000
            Re: Crowdstrike fiasco Mark Shroyer <mark@shroyer.name> - 2024-07-22 13:37 -0700
              Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-23 00:31 +0000
                Re: Crowdstrike fiasco Mark Shroyer <mark@shroyer.name> - 2024-07-22 23:37 -0700
      Re: Crowdstrike fiasco John McCue <jmccue@hairball.jmcunx.com> - 2024-07-19 14:45 +0000
        Re: Crowdstrike fiasco jgd@cix.co.uk (John Dallman) - 2024-07-21 10:53 +0100
          Re: Crowdstrike fiasco rbowman <bowman@montana.com> - 2024-07-21 18:42 +0000
      Re: Crowdstrike fiasco "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2024-07-19 12:20 -0400
      Re: Crowdstrike fiasco D <nospam@example.net> - 2024-07-19 22:21 +0200
        Re: Crowdstrike fiasco "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2024-07-19 16:47 -0400
          Re: Crowdstrike fiasco D <nospam@example.net> - 2024-07-20 11:26 +0200
          Re: Crowdstrike fiasco candycanearter07 <candycanearter07@candycanearter07.nomail.afraid> - 2024-07-30 17:40 +0000
    Re: Crowdstrike fiasco rek2 hispagatos <rek2@hispagatos.org.invalid> - 2024-07-20 13:44 +0000
      Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-20 17:04 +0100
        Re: Crowdstrike fiasco Michael Uplawski <michael.uplawski@uplawski.eu> - 2024-07-20 18:15 +0200
          Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-20 17:34 +0100
            Re: Crowdstrike fiasco Michael Uplawski <michael.uplawski@uplawski.eu> - 2024-07-20 19:18 +0200
            Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-21 07:12 +0000
              Re: Crowdstrike fiasco Michael Uplawski <michael.uplawski@uplawski.eu> - 2024-07-21 09:15 +0200
              Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-21 09:37 +0100
                Re: Crowdstrike fiasco D <nospam@example.net> - 2024-07-21 11:25 +0200
                Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-21 21:46 +0000
                Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-22 10:07 +0100
                Re: Crowdstrike fiasco Andy Burns <usenet@andyburns.uk> - 2024-07-22 10:20 +0100
                Re: Crowdstrike fiasco Simon <SimonJ@eu.invalid> - 2024-07-22 10:28 +0000
                Re: Crowdstrike fiasco Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2024-07-22 18:43 +0000
                Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-23 00:35 +0000
                Re: Crowdstrike fiasco Andy Burns <usenet@andyburns.uk> - 2024-07-23 11:52 +0100
                Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-23 12:38 +0100
                Re: Crowdstrike fiasco D <nospam@example.net> - 2024-07-23 16:44 +0200
                Re: Crowdstrike fiasco Rich <rich@example.invalid> - 2024-07-23 19:25 +0000
                Re: Crowdstrike fiasco D <nospam@example.net> - 2024-07-23 22:41 +0200
                Re: Crowdstrike fiasco Steve Hayes <hayesstw@telkomsa.net> - 2024-07-24 07:55 +0200
          Re: Crowdstrike fiasco Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2024-07-20 17:43 +0000
            Re: Crowdstrike fiasco rbowman <bowman@montana.com> - 2024-07-20 18:42 +0000
              Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-20 19:46 +0100
                Re: Crowdstrike fiasco ant@zimage.comANT (Ant) - 2024-07-20 19:35 +0000
                Re: Crowdstrike fiasco rbowman <bowman@montana.com> - 2024-07-20 23:17 +0000
                Re: Crowdstrike fiasco Andy Burns <usenet@andyburns.uk> - 2024-07-21 11:00 +0100
                Re: Crowdstrike fiasco rbowman <bowman@montana.com> - 2024-07-20 23:11 +0000
              Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-21 07:14 +0000
                Re: Crowdstrike fiasco Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2024-07-21 16:37 +0000
        Re: Crowdstrike fiasco Rich <rich@example.invalid> - 2024-07-20 17:57 +0000
          Re: Crowdstrike fiasco D <nospam@example.net> - 2024-07-20 22:29 +0200
          Re: Crowdstrike fiasco "186282@ud0s4.net" <186283@ud0s4.net> - 2024-07-27 02:12 -0400
            Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-27 08:56 +0100
        Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-21 07:10 +0000
          Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-21 09:33 +0100
            Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-21 21:48 +0000
              Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-22 10:11 +0100
                Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-23 00:36 +0000
                Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-23 01:40 +0100
                Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-23 02:07 +0000
                Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-23 08:40 +0100
                Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-24 02:52 +0000
                Re: Crowdstrike fiasco The Natural Philosopher <tnp@invalid.invalid> - 2024-07-24 07:36 +0100
                Re: Crowdstrike fiasco Lawrence D'Oliveiro <ldo@nz.invalid> - 2024-07-24 23:42 +0000
        Re: Crowdstrike fiasco nobody@nowhere.invalid (Marc Olschok) - 2024-07-22 23:56 +0000
    Re: Crowdstrike fiasco "186282@ud0s4.net" <186283@ud0s4.net> - 2024-07-26 03:34 -0400

csiph-web