Microsoft hosts a security summit but no press, public allowed Microsoft will host a security summit next month with CrowdStrike and other "key" endpoint security partners joining the fun — and during which the CrowdStrike-induced outage that borked millions of Windows machines will undoubtedly be a top-line agenda item. We won't know for sure, however, because the summit will be held …
...Party has got to be less expensive and less trouble than actually making their software secure. In the short term anyway. Sooner or later people will realize that having all of their eggs in Microsoft's basket is the best way to get screwed. Don't get me wrong. My windows install is there in lonely little VM. Once a month is boots up, installs updates, then shuts down again. It there just in case I need it. Otherwise I stick with my FLOSS software because at least I can trust it to get updates and be open with world about security.
Pheeew! Glad I read the article and figured this is not about Dracula Nadela or Nosferatu Marcuss leading a closed-doors meeting of like-minded data blood-sucking enthusiasts to discuss new potions, curses, and hypnosis strategies to entrance the public into surrendering to them, more of its hard-earned individuality and related PI. Developing one's individual, distinctive, and remarkable personality, among a sea of competing others, takes massive building and maintenance efforts, and shouldn't just be given away, without a fight, cheaply, or even for free, really.
This here cybersecurity meeting on the other hand, with the likes of MS and CrowdStrike, that'll be more like Alcoholics Anonymous IMHO, with lots of shame to be shared but not judged, pledges to stick-to, or restart, the twelve steps, stuff that's best kept closed-doors. We've all been there ...
I imagine the usual suspects sitting around the table with each promising to keep mum about the failings of the others' products.
I cannot envisage that lot every actually raising and discussing the fundamental security issues confronting contemporary IT.
I am not sure than any attending would know what any of those issues might be let alone how they might be addressed and remedied.
More a manglement PR bun fight.
Need an icon of Diogenes in his barrel. ;)
This is probably just to kick off a program to try to restrict the ability to run third party code in the Windows kernel. They tried it a few years ago and the AV/security vendors threw a fit. Now with the CrowdStrike outage they have more ammo to give it a second try. According to EU rulings decades ago, and other regulators, that should actually be fine as long as Microsoft doesn't use functionality that is not available to third party vendors for their own security solutions, and user-mode drivers have come a long way since then. There's going to be a lot of companies trying to stop MS from doing that because of all the work it takes to make changes to their solutions.
Micro$loth is ENTIRELY to blame for the ClownStrike fiasco.
First, they let them in at the kernel level.
Second, they let them in early enough in the boot process that it could stop the boot.
Third, they set up ButtLocker in such a stupid way that only a recovery key (that nobody remembers) would work in safe mode.
Sure, ClownStrike tossed in the shit code. But they should never have been able to, at least not without hacking their way in.
Micro$loth enables rootkits.
Microsoft is in a rock and hard place here, either they boot out of the kernel 3rd parties and anger every AV vendor, again, not to mention regulators that force them to allow compatibility, or they are forced to create a new way to allow visibility for these products to work, and anger every AV vendor to re-engineer their software and probably reduce effectiveness.
The one product that won't be impacted is Microsoft's own product Defender for sure, and who will be able to compete with native solutions afterwards?
Either way this is going to probably up-end the "make microsoft secure again" party and cause riots of everyone vs Microsoft, so of course they didn't want publicity for the sh*t show.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
