608
crowdStrikeIsAVerbNow
(lemmy.world)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 22 Jul 2024
608 points (97.9% liked)
Programmer Humor
32586 readers
1092 users here now
Post funny things about programming here! (Or just rant about your favourite programming language.)
Rules:
- Posts must be relevant to programming, programmers, or computer science.
- No NSFW content.
- Jokes must be in good taste. No hate speech, bigotry, etc.
founded 5 years ago
MODERATORS
What do you think WHQL is?
The problem with CrowdStrike's solution is that they got csagent.sys driver signed by WHQL, and the driver will download p-code from the internet and execute it. This allows them to push out changes without waiting for Microsoft approval.
The biggest problem occurs when you don't sanitize your inputs and someone accidentally uploads a blank file padded with zeroes. The driver dereferences a null value, and crashes your system. Hard.
I don't want to argue with you and I admit that my phrasing wasn't ideal but I assumed that it was obvious that i was talking about everything that would be executed on the machine. Apparently it wasn't.
Ahh. Approving every piece of software would make them... Apple.
You did say "driver", and Microsoft typically approves every single driver on the majority of PCs.