punkfungus@sh.itjust.workstoTechnology@lemmy.world•Microsoft points finger at the EU for not being able to lock down WindowsEnglish
8·
4 months agoCrowdstrike bypassed WHQL because the update was not to the driver, it was to a configuration file that then gets ingested by the driver. It’s deliberate so they can push out updates for developing threats without being slowed down by the WHQL process.
And that means when they decide to just send it on a Friday with a buggy config file, nobody is responsible but Crowdstrike.
This isn’t the first time such a vulnerability has been found, have you forgotten spectre/meltdown? Though this is arguably not nearly as impactful as those because it requires physical access to the machine.
Your fervour in trying to paint this as an equivalent problem to Intel’s 13th and 14th gen defects, and implication that everyone else are being fanboys, is just telling on yourself mate. Normal people don’t go to bat like that for massive corpos, only Kool aid drinkers.