• Carighan Maconar@lemmy.world
    link
    fedilink
    arrow-up
    1
    ·
    2 months ago

    And keep in mind, the falcon sensor exists for Linux. All those big companies largely use it.

    Essentially we just got lucky that their buggy patch only affected the windows version of the sensor in a showstopping way. Could have been all major OS.

    • 1984@lemmy.today
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      2 months ago

      I don’t think the Linux culture is very similar to the windows culture. At least for me personally, I wouldn’t use crowdstrike and let them install whatever they want into my environment.

      Maybe it’s just me.

      • Carighan Maconar@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        2 months ago

        It’s not your machine, your choice of distro, or your choice of specific packages to use or not use. It’s a work tool you get handed as part of a job. So whether CrowdStrike runs on it or not is not your decision and you aren’t allowed (and usually not capable) to change that.

        That’s an entirely different situation from one where you get a PC to do with as you please and set up yourself, or a private machine.

        Plus we’re mostly talking endpoint devices for non-technical users with many of these difficult-to-fix devices as techs have to drive out to them. The users expect a tool, and they get a tool. A Linux would be customized and utterly locked down, and part of that would be the endpoint protection software.

  • Suzune@ani.social
    link
    fedilink
    arrow-up
    1
    ·
    2 months ago

    Probably not. Most Linux admins know their systems and are able to navigate out of the situation with ease. But also most people don’t use any corporate off-the-shelf software, because there are better options that are freely available.

    Furthermore a Linux installation is dedicated and slim for one single purpose. The flexibility creates diversity.

      • Suzune@ani.social
        link
        fedilink
        arrow-up
        0
        arrow-down
        1
        ·
        2 months ago

        No. They don’t. They always need Microsoft support to solve situations and upgrades. You can also ask simple questions that they cannot answer. Try Active Directory: how to run AD in a secure fashion? Or: What services do rely on DCs in our company?

        • capital@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          2 months ago

          My guy, I work cloud support for both Linux and Windows VMs.

          I get dumbass cases from both all the time.

  • Possibly linux@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 months ago

    Then the internet would blame it all on Linux.

    However, the recovery process would be much faster. The Linux kernel would try to load the kernel module and if it fails it would skip it.

    • pelya@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      2 months ago

      Maybe on my 32-bit ARM server with ancient kernel it will. Any 64-bit machine is immune.

      • gedhrel@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        2 months ago

        …unless it’s running software that uses signed 32-bit timestamps, or stores data using that format.

        The point about the “millennium bug” was that it was a category of problems that required (hundreds of) thousands of fixes. It didn’t matter if your OS was immune, because the OS isn’t where the value is.