Replies

but hey if you hire an IT company named ‘crowd strike,’ and let it install stuff across your enterprise without vetting, as an engineer, i don’t have much sympathy for you.

I don't have a 100% grasp on all of the ins and outs, but I believe it's a bit more convoluted than that. As the end-user client company, usually you hire an IT support company (rather than staffing up your own inhouse IT department). That IT support provider assumes responsibility for protecting your network from cyber threats. If you ever get hacked, or some goofball clicks on an emailed hyperlink to let loose a bunch of russkie bits and bytes on your machine, you go after your IT support company and grill them for not adequately protecting you.

THAT IT support company decides to go with Crowdstrike which is one of several security software systems out there. Some dude at Crowdstrike messes up, IT support company has your systems set to auto update security software quickly (since these updates are usually responding to emerging threats), client company's computers all go poof.

Crowdstrike immediately says "oops, we messed up. But here's a little workaround that can fix the issue in minutes." Unfortunately, very few people actually sitting at these computers have the expertise OR security access to actually perform this workaround.

President of client company calls IT support company and threatens to fire them all if the issue isn't resolved. IT support company gets overwhelmed as they have more than one client doing this. Three tech guys quit cause they decide it's not longer worth the aggravation. Too much coffee ends up being drank...IT anarchy reigns.

Right now I blame Crowdsrike...and ONLY Crowdstrike.