I always forget Matthew Lillard is like 6’5” (195cm). I know he’s tall but damn they must have him standing in a trench or put his costars on boxes to level shots a bit because he’s towering over everyone in that pic and he’s not even standing up straight lol.
If you patch a security vulnerability, who’s fault is the vulnerability? If the OS didn’t suck, why does it need a 90 billion dollar operation to unfuck it?
Crowdstrike completely screwed the pooch with this deploy but ideally, Windows wouldn’t get crashed by a bas 3rd party software update. Although, the crashes may be by design in a way. If you don’t want your machine running without the security software running, and if the security software is buggy and won’t start up, maybe the safest thing is to not start up?
CrowdStrike also supports Linux and if they fucked up a Windows patch, they could very well fuck up a linux one too. If they ever pushed a broken update on Linux endpoints, it could very well cause a kernel panic.
Yeah, it’s a crowd strike issue. The software is essentially a kernel module, and a borked kernel module will have a lot of opportunities to ruin stuff, regardless of the OS.
Ideally, you want your failure mode to be configurable, since things like hospitals would often rather a failure with the security system keep the medical record access available. :/. If they’re to the point of touching system files, you’re pretty close to “game over” for most security contexts unfortunately. Some fun things you can do with hardware encryption modules for some cases, but at that point you’re limiting damage more than preventing a breach.
Architecture wise, the windows hybrid kernel model is potentially more stable in the face of the “bad kernel module” sort of thing since a driver or module can fail without taking out the rest of the system. In practice… Not usually since your video card shiting the bed is gonna ruin your day regardless.
Because it isn’t. Their Linux sensor also uses a kernel driver, which means they could have just as easily caused a looping kernel panic on every Linux device it’s installed on.
Security operations being one of the things that is often best done at the kernel level because of the need to monitor network and file operations in a way you can’t in user mode.
Also, it’s less about “their” drivers and more about what a kernel module can do.
Saying “there’s no way to know” doesn’t fit, because we do know that a malformed kernel module can destabilize a linux or mac system.
“Malformed file” isn’t a programming defect or something you can fix by having a better API.
Having the data exposed to userspace via an API would avoid having to have a kernel module at all… Which when malformed wouldn’t compromise the kernel.
I mean, sure. But typically operating systems don’t expose that type of information to user space, instead providing a kernel interface with user mode configuration.
It’s why they use the same basic approach on mac and Linux.
What’s your area of expertise? In my experience software jobs that pay a livable wage are pretty common, it’s finding one that isn’t miserable work for a terrible company that’s the tricky part.
Speaking at a software conference in 2009, Tony Hoare hyperbolically apologized for “inventing” the null reference:[26] [27]
I call it my billion-dollar mistake. It was the invention of the null reference in 1965. At that time, I was designing the first comprehensive type system for references in an object oriented language (ALGOL W). My goal was to ensure that all use of references should be absolutely safe, with checking performed automatically by the compiler. But I couldn’t resist the temptation to put in a null reference, simply because it was so easy to implement. This has led to innumerable errors, vulnerabilities, and system crashes, which have probably caused a billion dollars of pain and damage in the last forty years.
Huh, so Tony Hoare invented null and then Graydon Hoare invented Rust, immediately terminating the existence of null which does not have a traditional null value.
Firstly, no, it’s not gone forever. It remains in your onedrive recycling bin for a month. Secondly, that behavior makes sense. One drive is a mirror of your synced folders. If you just want to not have the file downloaded in your computer, just right click on the file and select “free up space”.
It is. Another indicator you get is a status icon next to each file telling you if the file is permanently or temporarily (meaning it will get auto-deleted locally if you don’t use it) dowloaded to your pc or if it’s only on the cloud.
Oh, and you also get a prompt when you delete a file letting you know that it will be deleted from onedrive as well but it will still be in the recycling bin for a while. The only way to not get that prompt is to tick a box to not get reminded again.
Microsoft software has a lot of flaws but this isn’t one of them.
In our head nothing ever was wrong, bugs only came along when you came along! You should have been able to build it in days, what’s so hard about this?
I remember visiting W3S like 10-15 years ago when first learning DOM manipulation etc at uni. But nowadays there’s nothing it can give me that MDN can’t, that I need to know.
Yeah… Then again I just use the DuckDuckGo bang !mdn and it searches MDN directly.
There’s also devdocs.io which can be indispensable when using a lot of popular utility libraries and frameworks in the same project. Just having a single page with all the relevant docs is just a real blessing.
programmer_humor
Top
This magazine is from a federated server and may be incomplete. Browse more on the original instance.