Recent searches
Search options
Microsoft now blaming the EU for the crowdstrike issue, because the EU made them open their APIs to third party developers in 2009 is hilarious.
If your APIs had any kind of gracious error handling, this wouldn’t be an issue. Fix your bad code, Microsoft, stop pointing fingers.
@thelinuxEXP This is 100% crowdstrike problem. They shipped a kernel driver that loaded external code into the kernel. As I understand it the .sys file that they loaded was all zeros, and their code used pointers in that file without any verification. This sort of file should have integrity checking in it and that should have been checked before loading. This is an enormous hole and I am surprised it hasn't been used before to insert malicious code as yet.