Diving into the embarrassing engineering behind CrowdStrike
Source: YouTube · Theo - t3․gg · published Jul 26, 2024 · 30:43
The CrowdStrike outage resulted from a catastrophic chain of failures where a faulty "content update" full of zeros crashed a kernel-mode driver, leading to global system failures and an insulting corporate response 2:14-3:04.
Key Takeaways:
• CrowdStrike's Falcon sensor uses a "boot start" kernel driver that loads external logic to bypass Microsoft's certification; a recent update containing null data caused this driver to crash systems repeatedly upon boot 2:14-3:04.
• The company deployed this unverified update globally to 100% of users simultaneously without any staggered rollout or testing, confirming they lacked basic safety protocols 8:50-9:02.
• The impact was catastrophic, with Delta canceling over 5,000 flights—exceeding their cancellations for 2018 and 2019 combined—and hospitals losing critical equipment access 1:02-1:19.
• CrowdStrike's response was widely condemned for its incompetence, consisting of a $10 Uber Eats gift card apology and a condescending blog post that failed to offer a genuine apology 11:03-11:18.
The incident highlights a systemic incompetence within CrowdStrike's engineering and PR teams, characterized by missing input validation, lack of testing, and a dismissive attitude toward the global chaos they caused.
Sources:
- 2:14-3:04 Explanation of the boot start driver and null data crash
- 8:50-9:02 Discussion on the lack of staggered rollout
- 1:02-1:19 Delta Airlines cancellation statistics
- 11:03-11:18 The $10 gift card apology and PR response
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
crowd strike crowd strike crowd strike the crowd strike failure is somehow even bigger of a mess than any of us thought I really want to emphasize this this isn't the normal like someone made a small oopsie there are so many points of failure here it's actually unbelievable and now we're finally starting to get more reporting from people who have dug in to see what's up and of course some embarrassing updates from crowd strike because they don't seem know how to do anything other than embarrass themselves and I you might have noticed I'm a little frazzled I already filmed this video and I'm redoing the intro because I did not realize how absurd this was and every detail I read somehow makes it more embarrassing from the $10 gift cards they're handing out as an apology to the 13 plus failur…