Asklemmy

43831 readers

787 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
!lemmy411@lemmy.ca: a community for finding communities

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago

MODERATORS

159

What makes CrowdStrike so ubiquous that their error created such catastrophe? (sh.itjust.works)

submitted 3 months ago by pastermil@sh.itjust.works to c/asklemmy@lemmy.ml

47 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] wewbull@feddit.uk -3 points 3 months ago (2 children)

This isn't a driver. It's anti-malware. Nobody on Linux puts such software in kernel space (as far as I'm aware). Root service? maybe, but that's still a user-space process.

[–] wizardbeard@lemmy.dbzer0.com 6 points 3 months ago* (last edited 3 months ago)

It is a driver though, it runs at kernel level and intercepts system calls for logging, analysis, and potential blocking if malware type patterns are detected in the system calls.

[–] HKayn@dormi.zone 1 points 3 months ago

Nobody on Linux puts such software in kernel space

Falcon Sensor is also being distributed for RHEL and Debian, and it caused issues there too.

https://www.neowin.net/news/crowdstrike-broke-debian-and-rocky-linux-months-ago-but-no-one-noticed/