China targeted and might have held for months access to the infrastructure used to do wiretaps on the AT&T and Verizon networks.

This is a huge "told you so" moment for the cryptographic community that has been saying that such infrastructure does present a huge risk to national security. China reportedly used this capability for intelligence collection, obviously without a warrant ...

https://www.wsj.com/tech/cybersecurity/u-s-wiretap-systems-targeted-in-china-linked-hack-327fc63b?st=C5ywbp&reflink=desktopwebshare_permalink

Today is when the world learns the answer to the question:

"What kind of IT muppet would install Crowdstrike (aka "Clownstrike") indiscriminately on critical *servers* in production?"

At scale EDR is a necessary evil for end-user fleets, especially when dealing with Windows environments where everyone has admin on their PC & opsec/security awareness across the organization is nonexistent.
But it is rarely justified for critical servers in a datacenter environment.

In an unexpected turn of events, a sensible take on #Crowdstrike from the Orange Site.

Source: https://news.ycombinator.com/item?id=41004184