• 0 Posts
  • 168 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle
  • There are a lot of misunderstandings about what happened. First, the ‘update’ was to a data file used by the crowdstrike kernel components (specifically ‘falcon’.) while this file has a ‘.sys’ name, it is not a driver, it provides threat definition data. It is read by the falcon driver(s), not loaded as an executable.

    Microsoft doesn’t update this file, crowdstrike user mode services do that, and they do that very frequently as part of their real-time threat detection and mitigation.

    The updates are essential. There is no opportunity for IT to manage or test these updates other than blocking them via external firewalls.

    The falcon kernel components apparently do not protect against a corrupted data file, or the corruption in this case evaded that protection. This is such an obvious vulnerability that i am leaning toward a deliberate manipulation of the data file to exploit a discovered vulnerability in their handling of a malformed data file. I have no evidence for that other than resilience against malformed data input is very basic software engineering and crowdstrike is a very sophisticated system.

    I’m more interested in how the file got corrupted before distribution.



  • That is almost entirely a myth. Yes, there are ‘cross over votes’ in states that don’t have open primaries but facilitate party enrollment, but those cross over voters are almost always ‘independent’ voters who enroll and then unenroll and are not doing anything other than voting for the candidate of their choice in the primary that candidate is running in. So called ‘strategic voting’, as far as I know, has never made any difference in any presidential primary, but go ahead and bring up the bodies.





  • " local citizens came together to take the necessary steps to protect their homes." - the steps they took were obviously not the necessary steps, instead they were unnecessary and in fact idiotic.

    The Town of Salisbury did not ‘grapple with sea rise’. An ad hoc association, Salisbury Beach Citizens for Change, basically the owners of multi-million dollar absurdly situated beach front homes, blew 500,000 dollars on one wall of a giant sand castle.














  • You can list all the current loaded drivers. You can examine the system event log for service start operations. You can run with a kernel debugger attached and examine any loaded driver. The driver itself is likely correctly signed and will not require additional user acknowledgement beyond what was given when the game was installed.