Sure, and I’ll even broaden that. I’m pretty sure everything that has ever been used as a medium of exchange has been used in a scam somewhere, and the easier it is to use that medium of exchange, the more scams have been perpetrated using it.
Janet Yellen is not in charge of the United States money supply. You’re thinking of the Federal Open Market Committee, which is comprised of the seven members of the Federal Reserve Board, the president of the New York Federal Reserve Bank, and four of the eleven regional Federal Reserve Bank presidents on a yearly rotating basis.
And I’m not sure why you’re bringing up a criticism of our collective net worth on a discussion around whether Bitcoin is used in scams, unless you’re trying to push the narrative that traditional fiat currency is somehow worth less than an unbacked security. Which is both irrelevant to the conversation, and a pretty good indication that you don’t really understand how currency works.
Yes, CrowdStrike says they don’t need to do conventional AV definitions updates, but the channel file updates sure seem similar to me.
The file they pushed out consisted of all zeroes, which somehow corrupted their agent and caused the BSOD. I wasn’t on the meeting where they explained how this happened to my company; I was one of the people woken up to deal with the initial issue, and they explained this later to the rest of my team and our leadership while I was catching up on missed sleep.
I would have expected their agent to ignore invalid updates, which would have prevented this whole thing, but this isn’t the first time I’ve seen examples of bad QA and/or their engineering making assumptions about how things will work. For the amount of money they charge, their product is frustratingly incomplete. And asking them to fix things results in them asking you to submit your request to their Ideas Portal, so the entire world can vote on whether it’s a good idea, and if enough people vote for it they will “consider” doing it. My company spends a fortune on their tool every year, and we haven’t been able to even get them to allow non-case-sensitive searching, or searching for a list of hosts instead of individuals.
Speaking as someone who manages CrowdStrike in my company, we do stagger updates and turn off all the automatic things we can.
This channel file update wasn’t something we can turn off or control. It’s handled by CrowdStrike themselves, and we confirmed that in discussions with our TAM and account manager at CrowdStrike while we were working on remediation.
Depends on where you are.
I’m in the Midwestern United States now, where summer is often pretty frustrating due to the high humidity. But I’m originally from Phoenix, where I really enjoyed summer (in the shade), because I love the feeling of warmth soaking into my bones, and I never got sweaty.
I’m a security engineer, and encryption is great, but can be bypassed. Relying on encryption assumes it was implemented properly, that the system was shut down properly so all keys were flushed correctly, and the encryption algorithm doesn’t have weaknesses.
Generally if somebody dedicated enough can acquire physical access to a system, they can probably find a way into it given the right resources. Did that happen here? Probably not. Could it have? Absolutely. That’s why most enterprises or government hard drives are shredded rather than just relying on them being wiped or encrypted.
Encryption is part of the solution, but it’s not automatically the complete solution.
We don’t know what was on those servers, but it was apparently sensitive enough that the government redacted descriptions of the data in court filings.
The US government brief said the relocated servers were not wiped before being moved to a new data center. The type of data on the relocated servers was apparently so sensitive that it could not be described in the US court filing, which redacts the sentence that describes what the servers contained.
That’s also part of why a lot of large telescope mirrors get made in Tucson, at the University of Arizona!
I run those calls through my own phone system, which I host on a system in my basement. There are a couple main options out there, I used FreePBX for a while but now I’m using 3CX. They don’t require a ton of computing power-- mine runs on a virtual server inside a larger system, but you could run one off of an inexpensive thin client from eBay if you wanted to.
I get my phone number from VoIP.ms, which is pretty inexpensive and has worked well for me for years.
For a phone, you can either use a soft phone (an app on your computer or smartphone), or use an older IP phone off eBay (which is what I do since I also have a Plantronics wireless headset that connects to it).
It’s pretty easy to get started, but you do need to make sure you’re configuring everything correctly since selfhosted services can open up security holes in your network if you don’t know what you’re doing.
This is why I always record calls with major corporations when I’m talking about money. I’ve never had to actually resort to sending them recordings, but I have used the “Well, every call made from this phone is recorded, so I can go back and pull the recording of what I’ve been told if you don’t have it in your system” line a couple times.
Any chance you’d be willing to share the STL? I have a 16 inch portable monitor as well and I kinda want to try this when my new printer arrives.