Perhaps I read it wrongly but "Southwest Airlines not being affected by #crowdstike" could not just be "we did not run #crowdstrike on critical operations systems"?

Sort of easier than the Windows 3.11 story?

@cynicalsecurity

it could, but now you're talking about them.

@munin oh, I see, it is more fun to pretend they run on a ZX81 than actually suggest that, in breach of all regulatory requirements and sekurity theatre, they were not running EDR on internal systems running critical ops (which is what I would have recommended)?

@cynicalsecurity

more along the lines of, "hey this would be a good story for publicity and get us press for being the only ones still operating as normal"

@munin oh, I wasn't sufficiently cynical…

@cynicalsecurity

eh, marketers have a different set of priorities.