Re: Did a font change in a PDF cause the Crowdstrike fail?
Jonathan Fine <[email protected]>
| Newsgroups | gmane.comp.tex.texhax |
|---|---|
| Message-ID | <CALD=Yf9t2QU+3uO_0TsFqAO8nnrL1WcTaj5CuW0mu-MdUkEBCg@mail.gmail.com> |
Hi We now have more information about the CrowdStrike fault. According to wikipedia, "an update to a configuration file [...] conflicted with the Windows sensor client [...] causing a blue screen of death". I was working from the hint from Joe Tidy, that the cause might be an innocous change in font or logo. I regard a change to a configuration file as something else. CrowdStrike describes the change in configuration as "a content deployment". This may have misled Joe Tidy, and thus myself. Even though CVE-2024-4367 is a serious vulnerability, arising from the size of the standard and the complexity of the interactions between the different parts, in the matter of the CrowdStrike incident PDF is innocent. Here's the links: https://en.wikipedia.org/wiki/2024_CrowdStrike_incident https://www.crowdstrike.com/blog/statement-on-falcon-content-update-for-windows-hosts/ I'm happy now to consider this matter closed. with kind regards Jonathan