Re: CrowdStrike and drivers (was Re: why reliable linux hasn't gained more market share?)
On Sun, 21 Jul 2024 02:43:15 -0400
Jeffrey Walton <noloader@gmail.com> wrote:
>
> This is alarming (to me) from the YC post:
>
> "we push software to your machines any time we want,
> whether or not it's urgent, without testing it" seems to be
> core to the model...
>
> Updates need to be tested inside an organization's lab, and then
> tested with a sampling of the organization's computers. Then, an
> organization is free to release the update to all machines. All of
> that has to happen in two weeks to 30 days.
>
At the very least, updates should be avoided for a few days after
release, unless they are the exceeding rare 'Oh my God, patch this
yesterday' kind, such as when the malware writers of the world realised
that Windows MetaFiles could contain executables...
Small businesses cannot really do as you say, but any business large
enough to have logistics problems in fixing all of their machines
quickly should do so.
--
Joe
Reply to: