384

Cybersecurity firm Crowdstrike pushed an update that caused millions of Windows computers to enter recovery mode, triggering the blue screen of death. Learn ...

you are viewing a single comment's thread
view the rest of the comments
[-] dan@upvote.au 66 points 2 months ago* (last edited 2 months ago)

Are there really a billion systems in the world that run Crowdstrike? That seems implausible. Is it just hyperbole?

[-] MeekerThanBeaker@lemmy.world 44 points 2 months ago

Probably includes a bunch of virtual machines.

[-] Joelk111@lemmy.world 21 points 2 months ago

Yeah, our VMs completely died at work. Has to set up temporary stuff on hardware we had laying around today. Was kinda fun, but stressful haha.

[-] dan@upvote.au 9 points 2 months ago

Could you just revert VMs to a snapshot before the update? Or do you not take periodic snapshots? You could probably also mount the VM's drive on the host and delete the relevant file that way.

[-] EncryptKeeper@lemmy.world 10 points 2 months ago

Yes you can just go into safe mode on an affected machine and delete the offending file. The problem is it took a couple hours before that resolution was found, and it has to be done by hand on every VM. I can’t just run an Ansible playbook against hundreds of non-booted VMs. Then you have to consider in the case of servers, there might be a specific start up order, certain things might have to be started before other things and further fixing might be required given that every VM hard crashed. At the minimum it took many companies 6-12 hours to get back up and running and on many more it could take days.

[-] dan@upvote.au 4 points 2 months ago

Makes sense - thanks for the details.

[-] UnsavoryMollusk@lemmy.world 1 points 2 months ago

This is assuming you have those access. Some companies can sometimes be a bit .... Stupid.

[-] Joelk111@lemmy.world 1 points 2 months ago* (last edited 2 months ago)

Yeah, like the other person said, corporate IT is responsible for that stuff. I guess they're working through the weekend to try to get it fixed.

[-] biggerbogboy@sh.itjust.works 27 points 2 months ago

I doubt it's too much of a stretch, since even here in australia, we've had multiple airlines, news stations, banks, supermarkets and many others, including the aluminium extrusion business my father works at, all go down, scale this do hundreds of countries with populations tenfold of ours, it puts it into perspective that there may even be more than a billion machines affected

[-] Imgonnatrythis@sh.itjust.works 16 points 2 months ago

Despite how it may seem on Lemmy, most people have not yet actually switched to Linux. This stat is legit.

[-] dan@upvote.au 9 points 2 months ago

I know that Windows is everywhere, I just don't know the percentage of Windows computers that run Crowdstrike.

[-] TheDarksteel94@sopuli.xyz 10 points 2 months ago

Keep in mind, it's not just clients, but servers too. A friend of mine works for a decently sized company that has about 1600 (virtual) servers internationally. And yes, all of them were affected.

[-] hglman@lemmy.ml -4 points 2 months ago* (last edited 2 months ago)

You do realize that linux is something like 80% of servers. Which also well out number personal machines. If you include android linux is easily the most used os on the planet.

[-] Buelldozer@lemmy.today 8 points 2 months ago

It’s 80% of web servers but not 80% of ALL servers.

[-] hglman@lemmy.ml -2 points 2 months ago

if the question is which os has the most distinct running copies then yeah its linux.

[-] TexMexBazooka@lemm.ee 5 points 2 months ago

Sounds pretty plausible to me. An organization doesn’t have to be very big to get into the hundreds or thousands of devices on a network when you account for servers and VM.

A company with 40 employees all accessing and RDS server using a company laptop is looking at 85+ devices already

this post was submitted on 20 Jul 2024
384 points (94.7% liked)

Technology

58143 readers
4462 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS