On reddit tons of people are like “hurr durr it was caused by a configuration error that propogated down causing failed health checks and remaining non-updated servers got overloaded durr” and that’s the “techy” explanation.
Maybe that’s enough for MS IT guys and no shade but, with e.g. crowdstrike we knew pretty quickly exactly what the cause was - an array out of bounds read because of an extra malware definitions file (or something to that effect i do not recall exactly).
It is suspect to me that this outage went on for this long, despite how much it affected, and how the recovery went along so haphazardly it seems. They are probably not done with RCA yet but i also wonder if it was a more negligent fuckup they want to keep under wraps to avoid bad rep and e.g. UK 999 system choosing a different tech corp to work with next time as some european govt agencies have already done.
What do you think?
I’m of the (completely speculative) opinion that the US just experienced a massive cyber attack (maybe Iran, maybe literally anyone else as USA has a lot of enemies) and that we’re all being kept in the dark about it.
“Never attribute to malice that which is adequately explained by stupidity”
https://en.wikipedia.org/wiki/Hanlon’s_razor
I personally believe it needs to be slightly modified to:
“Never attribute to malice that which is adequately explained by fucking idiots seeking profits.”
I disagree with Hanlon’s razor simply because stupidity and malice are often sold as a bundle.
There were thousands of people involved in fixing this. There is no way MS could keep an attack under wraps if they wanted to.
Yep.
Funny how the FAA comms outage was the next day.
This will be considered Day 1 of the first all-out cyber war.
How would MS and the FAA silence the thousands of people involved in fixing these incidents?
NDAs, money, threats, I do not know, just throwing stuff at the wall right now