SoylentNews is people
SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.
SoylentNews
https://techcrunch.com/2024/07/24/crowdstrike-offers-a-10-apology-gift-card-to-say-sorry-for-outage/
CrowdStrike, the cybersecurity firm that crashed millions of computers with a botched update all over the world last week, is offering its partners a $10 Uber Eats gift card as an apology, according to several people who say they received the gift card, as well as a source who also received one.
On Tuesday, a source told TechCrunch that they received an email from CrowdStrike offering them the gift card because the company recognizes "the additional work that the July 19 incident has caused."
This discussion was created by hubie (1068) for logged-in users only, but now has been archived.
No new comments can be posted.
CrowdStrike Offers a $10 Apology Gift Card to Say Sorry for Outage
|
Log In/Create an Account
| Top
| 22 comments
| Search Discussion
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Fine day to work off excess energy. Steal something heavy.
(Score: 5, Insightful) by sjames on Saturday July 27 2024, @04:49PM (5 children)
They did plenty wrong. They pushed out a bad update that obviously had no QA whatsoever. They designed it to push out everywhere at once with no ability for local admins to have any control or even notification of the update. Since the update was all zeros, there apparently wasn't even effective checksumming done on the client end to avoid attempting to run garble as code.
(Score: 2) by RS3 on Saturday July 27 2024, @05:29PM (3 children)
I know of checksums, but haven't studied them in detail. Would an all-zero file have an all-zero checksum, thus passing checksum test? (an all-zero checksum should never pass, but maybe they forgot to "sanitize" the checksum result)
(Score: 3, Informative) by quietus on Saturday July 27 2024, @05:49PM
Nop to the all-zero's checksum -- you get a string of hexadecimal characters, but not all zeroes. The real question is: an all-zeroes [security] update?
(Score: 3, Informative) by kazzie on Saturday July 27 2024, @06:04PM
That depends entirely on the checksum algorithm used. To give a simplistic example, an even parity will give a one-bit 0 checksum for your all-zero file, but odd parity would give a '1'.
(Score: 2, Informative) by anubi on Saturday July 27 2024, @09:43PM
Some of those checksums are just that.
Sum+=data // running sum in the loop.
Just to confuse things, they also call a cyclic redundancy check a "checksum"
https://html.duckduckgo.com/html?q=crc8 [duckduckgo.com]
"Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
(Score: 4, Touché) by VLM on Saturday July 27 2024, @05:38PM
IoT-world gets lots of things wrong, especially security in general, but at least updates usually are done A/B style and in waves.
Pretty bad when a smartmeter or similar is more professionally managed than corporate "security" solutions for PCs.