Seriously, #CrowdStroke should've ended #Microsoft or at least #Windows for good...
https://en.wikipedia.org/wiki/2024_CrowdStrike-related_IT_outages#Background
#CrowdStrike #InsecureUnderAnyConfiguration #UnsafeAtAnyConfiguration #Govware #Malware #ITsec #InfoSec #OSec #ComSec #CriticalInfrastructure #SinglePointOfFailure #Resilience
@douglevin see, this exact scenario is why I act as "#BenevolentDictator" and literally lockdown stuff so hard #TechIlliterates cant fuck up!
I wasted 15+ years of my life trying to make #Windows somewhat secure to come to terms with the fact that ut's an #unfixable #Givware that is #UnsafeAtAnyConfiguration / #InsecureAtAnyConfiguration.
On the flipside I've seen cases where #Scam|my Sales Reps were able to upsell some 5-digit 21,5" gaming monster to a photographer that uses ACDSee to do minimalist editing of their JPEGs.
At least I won't deal with #Windows11 or any of that shite because noone is gonna pay me enough to loose my sanity over such a garbage software!
And yes, WE, THE "TECH LITERATES" ARE TO BLAME FOR THIS because we didn't demand #Security and #Simplicity before #Convenience!!!
This weekend I spent half a day remediating an elderly relative's Win 11 home laptop. Totally overpowered and overpriced for her needs, it was recommended to her by BestBuy when her old machine was complaining it wasn't compatible with the new MS OS rollout :( Both her OS and primary email were compromised. The threat actor did not disable Defender but just excluded every important directory from scans. May have also punched a hole in her device firewall for all I could tell. Only reason she even knew an issue had occured was due to issues with her email. She stopped receiving any emails and we reached out upon recieving what appeared to be a phish from her account. (No link to click in initial message, but an invitation to a longer urgent conversation.) Turns out they just redirected her email to her outlook account email (which she didn't even know she had, but was generated as part of her Win 11 install). They created a new alias and added some other rules to auto-forward further comms. FWIW, the rogue device attached to her account was coming from a TX location - many states away from us. No 2FA, no adblocker, no password manager, no understanding of firewalls, what makes a password stronger vs weaker, confused by messages about actions that were computer/browser/OS related. But look. She's 80+. I only had a few hours to investigate and remediate. I can't change all that and expect her to manage it on her own. How the f*ck is it possible that an average user can manage this stuff? Why is Win such a trash fire? Can't MSFT make a default config for non-technical home users that is locked down by default? She has literally ZERO chance against threat actors on the modern web. We in tech have totally lost the plot... I am NOT looking for advice (just use Linux or w/e). I am venting about shit UI, shit tech co's pushing the next new crap tech for no other reason than $, and the state of the modern web.
Please look at your specific model on https://ftp.avm.de/fritzbox/ and if it has a .image file dated 2023-09-04 OR LATER, get that thing updated NOW!
If your #FritzBox is not listed anywhere OR it didn't get any update dated 4th September 2023 or newer, pull it form it's duty as #Router / #Modem NOW!
Because it's #UnsafeAtAnyConfiguration!!!
@ct_Magazin das Problem daran: ES FUNKTIONIERT NICHT!
Wäre es wirksam und würde tatsächlich schützen, dann wäre es der Standard.
Das Problem sind nicht #Schadprogramme direkt, sondern die unfixbare #Unsicherheit von #Windows im speziellen und #Microsoft-Produkten generell:
Die sind #UnsafeAtAnyConfiguration per Design!
And yet people ask me "Why don't you work as public servant / in public administration / for MIL/INTEL/LEAs ?"
Cuz they are ALL so dangerously incompetent that one doesn't need some Russian Hackers, but the entire #IT of these is so shit that it's #UnsafeAtAnyConfiguration and the decisionmakers are "concrete-headed" morons that prefer papers over skill and will refuse to change yet sacrifice one as a pawn when shit inevitably hits the fan sooner or later...
I'm done with those...
@nixCraft true, true...
#Malware as being spread on #Windows, doesn't exist in that sense on #Linux.
Because not only are there less #TechIlliterates that open up every shit and give it admin permissions, but also because noone uses #UnsafeAtAnyConfiguration #Govware like #MicrosoftOffice and subsequent insecure file formats like #OOXML on Linux.
Basically the only times #malware is being successful is when someone [criminally] neglected to keep systems updated, which is extremely rare...
Kevin Karhan 
Kevin Karhan 