11 ms·

what many people of not taking is that why we are here: one simple reason: all eggs in one Microsoft PC basket why in one Microsoft PC basket? - most corpora

what many people of not taking is that why we are here: one simple reason: all eggs in one Microsoft PC basket why in one Microsoft PC basket? - most corporate desktop apps are developed for Windows ONLY Why most corporate desktop apps are developed for Windows ONLY? - it is cheaper to develop and distribute since, 90% of corporations use Windows PCs ( Chicken and Egg problem) - alternate Mac Laptops are 3x more expensive, so corporations can't afford - there are no robust industrial grade Linux laptops from PC vendors (lack of support, fear of Microsoft may penalize for promoting Linux laptops etc.) 1/ Most large corporations (Airlines, Hospitals etc..) can AFFORD & DEMAND their Software vendors to provide their ' business desktop applications' both in Windows and Linux versions and install mix of both Operating systems. 2/ majority of corporate desktop applications can be Web applications (Browser based) removing the single vendor Microsoft Windows PC/Laptops -

ahachete 2y ago
Lenovo and Dell have some laptops with Linux, and they are very good ones. (not sure if you meant rugged ones, that may not be the case, but I guess this is a tiny percentage of the market)
- linuxlizard 2y ago
  Crowdstrike also has an Ubuntu Linux version. We're required to install it at work.
trhway 2y ago
SolarWinds story was quickly forgotten, and this one will be too, and we'll continue to build such special single points of global catastrophic failure into our craftly architected decentralized highly robust horizontally scaled multi-datacenter-region systems
- rtev 2y ago
  Solarwinds is still dealing with the reputation damage and fallout today from that breach. People don’t forget about this stuff. the lawsuits will likely be hitting crowdstrike for years to come
- TeaBrain 2y ago
  The SolarWinds story wasn't forgotten. Late last year the SEC launched a complaint against SolarWinds and its CISO. It was only yesterday that many of the SEC's claims against the CISO were dismissed.
ttyprintk 2y ago
No less than three baskets, or you cannot apply for bailouts. If you want to argue your industry is a load-bearing element in the economy: no less than three baskets.
watermelon0 2y ago
Windows is not the issue here. If all of the businesses used Linux, a similar software product, deployed as widely as Crowdstrike, with auto-update, could result in the same issue. Same goes for the OS; if let's say majority of businesses used RHEL with auto updates, RedHat could in theory push an update, that would result bring down all machines.
- antihero 2y ago
  I would posit that RedHat have a slightly longer and more proven track record than Crowdstrike, and more transparent process with how they release updates. No entity is infallible but letting one closed source opaque corporation have the keys to break everything isn’t resilient.
  - oblio 2y ago
    His example actually had 2 parts. One RH bricking the OS, the other one with a commercial vendor creating software with separate auto update. You've only addressed the RH OS angle.
    - antihero 2y ago
      Yes but the problem here was bricking the OS
- phkahler 2y ago
  >> Windows is not the issue here. Yes it is. Windows was created for the "Personal Computer" with zero thought initially put in to security. It has been fighting that heritage for 30 years. The reason Crowdstrike exists at all is due to shortcomings (real or perceived) in Windows security. Unix (and hence Linux and MacOS) was designed as a multi-user system from the start, so access controls and permissions were there from the start. It may have been a flawed security model and has been updated over time, but at least it started some notion of security. These ideas had already expanded to networks before Microsoft ever heard the word Netscape.
  - 2y ago
__MatrixMan__ 2y ago
Making everything browser based doesn't help (unless you can walk across the room and touch the server). The web is all about creating fast-acting local dependency on the actions of far-away people who are not known or necessarily trusted by the user. Like crowdstrike, it's about remote control, and it's exactly that kind of dependency that caused this problem. I love piling on Microsoft as much as the next guy, but this is bigger than that. It's a structural problem with how we (fail to) manage trust.

ahachete 2y ago

Lenovo and Dell have some laptops with Linux, and they are very good ones. (not sure if you meant rugged ones, that may not be the case, but I guess this is a tiny percentage of the market)

linuxlizard 2y ago
Crowdstrike also has an Ubuntu Linux version. We're required to install it at work.

trhway 2y ago

SolarWinds story was quickly forgotten, and this one will be too, and we'll continue to build such special single points of global catastrophic failure into our craftly architected decentralized highly robust horizontally scaled multi-datacenter-region systems

rtev 2y ago
Solarwinds is still dealing with the reputation damage and fallout today from that breach. People don’t forget about this stuff. the lawsuits will likely be hitting crowdstrike for years to come
TeaBrain 2y ago
The SolarWinds story wasn't forgotten. Late last year the SEC launched a complaint against SolarWinds and its CISO. It was only yesterday that many of the SEC's claims against the CISO were dismissed.

ttyprintk 2y ago

No less than three baskets, or you cannot apply for bailouts. If you want to argue your industry is a load-bearing element in the economy: no less than three baskets.

watermelon0 2y ago

Windows is not the issue here. If all of the businesses used Linux, a similar software product, deployed as widely as Crowdstrike, with auto-update, could result in the same issue. Same goes for the OS; if let's say majority of businesses used RHEL with auto updates, RedHat could in theory push an update, that would result bring down all machines.

antihero 2y ago
I would posit that RedHat have a slightly longer and more proven track record than Crowdstrike, and more transparent process with how they release updates. No entity is infallible but letting one closed source opaque corporation have the keys to break everything isn’t resilient.
- oblio 2y ago
  His example actually had 2 parts. One RH bricking the OS, the other one with a commercial vendor creating software with separate auto update. You've only addressed the RH OS angle.
  - antihero 2y ago
    Yes but the problem here was bricking the OS
phkahler 2y ago
>> Windows is not the issue here. Yes it is. Windows was created for the "Personal Computer" with zero thought initially put in to security. It has been fighting that heritage for 30 years. The reason Crowdstrike exists at all is due to shortcomings (real or perceived) in Windows security. Unix (and hence Linux and MacOS) was designed as a multi-user system from the start, so access controls and permissions were there from the start. It may have been a flawed security model and has been updated over time, but at least it started some notion of security. These ideas had already expanded to networks before Microsoft ever heard the word Netscape.
- 2y ago

__MatrixMan__ 2y ago

Making everything browser based doesn't help (unless you can walk across the room and touch the server). The web is all about creating fast-acting local dependency on the actions of far-away people who are not known or necessarily trusted by the user. Like crowdstrike, it's about remote control, and it's exactly that kind of dependency that caused this problem. I love piling on Microsoft as much as the next guy, but this is bigger than that. It's a structural problem with how we (fail to) manage trust.