Theyre staying pretty mum about it. And saying it was a problem with their update.
Assuming thats the extent of it, buying crowdstrike rn is tempting. Which makes me think it isnt.
AFA: why people didnt take any particular WSC seriously... well it costs upkeep to stay vigilant. Realistically we cant always be watching for everything, there's a certain amount of uncertainty we accept. We get into our cars and accept that while people follow most of the rules of the road most of the time, it only takes one.
Companies love talking about how efficient they are and secure they are, but the two often contradict each other. Cant have redundancies and be more efficient than the people who accept a tiny risk of a problem and dont have redundancies.
It seems you may be thinking it's a security attack, which no evidence currently suggests is the case.
"efficiency" and "Security" are still exclusive, even when we are talking about this kind of outage.
"Efficiency" with a single, (and thus, defacto-standardized) ERP provider, means less opportunity losses (because of interoperability issues), and fewer issues with your middle-men making bad middleware picks (with increased overhead due to predatory licensing-- SO LONG as you are not being hit by onerous monopoly pricing structures.) It WORKS GREAT, up until your SINGLE POINT OF FAILURE, then in fact, FAILS.
(as happened yesterday.)
"Security" in the context of "fault tolerance", especially as it relates to WHOLE DAMN INDUSTRIES, and MULTIPLE INDUSTRIES AT ONCE (like happened yesterday...) means that you SHOULD have multiple competing providers, so that if one suffers a mishap like this, the whole system does not break down.
Efficient organizations are fragile organizations.
This is true for both reliability, AND for actual security.
I mean... linux historically has a habit of preventing the user from installing software at all, so I'm not sure that's 100% accurate 
Not really. Linux does not stop a user from installing software. It prevents people who lack appropriate credentials from doing so, and enforces a separation from daily driving user credentials and "No, THIS IS FOR SYSTEM ADMINISTRATION DUMBASS" administrator credentials.
This is what Super User DO is for. (sudo) It allows your limited user to perform an administrative function as a one-off, and challenges for the needed security token, then lets you do the needful.
EG, if you want to install the GNU solitaire app, (on a debian-like), its a simple matter of
sudo apt-get install aisleriot
it does the needful, and boom-- solitaire shows up in your games list. Easy peasy.
Occassionally, you will have to compile some specialist software from source, and use "make install" to get it, but this is exceedingly rare these days.
Author
Topic: Things that made you go "WTF?" today o_O (Read 14251207 times)