Their stock price will suffer but they can waive license fees for a year or so for every endpoint affected (~$50).
They better pin this on a rogue employee, but even then, force pushing updates shouldn't be in their capability at all! They must guarantee removal of that capability.
Lawsuits should be interesting. They offer(ed?) $1 mil breach insurance to their customers, so if they were to pay only that much per customer this might be compensation north of $10B. But to be honest, wouldn't surprise me if they can pay up without going bankrupt.
The sad situation is, as twitter people were pointing out, IT teams will use this to push back against more agents for a long time to come. But in reality, these agents are very important.
Crowdstrike Falcon alone is probably the single biggest security improvement any company can make and there is hardly any competition. This could have been any security vendor, the impact is so widespread because of how widely used they are, but there is a reason why they are so widely used to begin with.
Oh and just fyi, the mitigation won't leave you unprotected, when you boot normal, the userspace exe's will replace it with a fixed version.
Yes, it offers very real protection. Crowdstrike in particular is the best in the market, speaking from experience and having worked with their competitor's products as well and responded to real world compromises.
So long as those people are adults who are functional (can care for themselves), it isn't society's business to protect them from self-harm. Your sensible checks are violations of liberty. A person's right and authority over themselves being infringed is a loss of liberty. Society gets involved when their actions affect non-consenting members of society.
If we aren't regulated then anti-drug laws shouldn't exist. A government made up of it's people cannot regulate it's people by virtue of having a superior self control or wisdom. How can there be liberty without this?
Those are private properties or privileged activities. Eating poison, in your private home being regulated means your home is not truly yours and you have no liberty.
If they stuck to binary libraries that would have been nice but since you have to build deps locally and match up the right versions, go and rust programs have been a constant headache for me similar to python. The version from debian repos never seems to be good enough, I have to install it from upstream and maintain it.
While I still do run into 2.7 code, even for 3 dependencies are the problem. You always use a library of some kind and that library could use a new python feature. You could pin it but then other scripts that need the new version break. And that is if you could even easily find the module and version. Just this week I helped someone troubleshoot a bug they've been trying to fix for weeks/months and it was just a matter of the library code being too new for 3.6. It's an ever growing planned mess.
Not if you use any libraries. The whole venv/pyenv/pipx stuff of python needs to implemented for other languages too. Every program needing it's own virtual environment and tooling for every build.
C is enjoyable to write with although if others rely on your code, safety should have a higher priority.
The one thing I could never enjoy in C after getting used to languages like php and python is string handling. It isn't just dangerous but very tedious, complex and lacking elegance. Lack of a native string type and string operators really sucks.
I like being able to do "hello "+"world".
Another pro the author didn't mention is how my crapy code from 10yrs ago still works today. Can't say that about rust, go, python or most modern languages. It really sucks how "planned obsolecence" has crept it's way into programming languages.
People look at this and think "dumb politicians" but that's not the right conclusion. The security teams responsible for protecting them are to blame, yes, even for poor password choices and drarkweb leaks.
It's a paid product. Who wants to pay to read AI content? If you're monetizing on ads this would make sense but if I pay for WaPo it is because of the reputation it has thanks to human investigative journalists.
It still doesn't measure up to xp's rolling hills or just about any macos default wallpaper. Nature is really pretty and hard to compete against. Small things like this say a lot about the overall product design philosophy in my opinion.