vegeta@lemmy.world to Technology@lemmy.worldEnglish · 28 days agoCrowdStrike unhappy with “shady commentary” from competitors after outagearstechnica.comexternal-linkmessage-square101fedilinkarrow-up1554arrow-down18
arrow-up1546arrow-down1external-linkCrowdStrike unhappy with “shady commentary” from competitors after outagearstechnica.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 28 days agomessage-square101fedilink
minus-square𝕸𝖔𝖘𝖘@infosec.publinkfedilinkEnglisharrow-up1·27 days agoHorrible how? I’ve always thought they were pretty solid in the arena.
minus-squareozymandias117@lemmy.worldlinkfedilinkEnglisharrow-up3·edit-227 days agoTheir ftrace hooks caused all disk usage to be serialized, making your multi-core processor single-core when doing anything I/O bound We saw between 500% - 800% increases in build times with their software installed
minus-square𝕸𝖔𝖘𝖘@infosec.publinkfedilinkEnglisharrow-up2·27 days agoWell, that’s spectacular. What do you guys use now?
minus-squareozymandias117@lemmy.worldlinkfedilinkEnglisharrow-up3·27 days agoWe’re still using them on machines where performance doesn’t matter On build machines, they’re on a special VLAN and don’t have endpoint protection, but they only download from a protected mirror
minus-square𝕸𝖔𝖘𝖘@infosec.publinkfedilinkEnglisharrow-up1·27 days agoWe have a similar issue with defender, but those machines are internet connected, so we must have EDR on them.
Horrible how? I’ve always thought they were pretty solid in the arena.
Their ftrace hooks caused all disk usage to be serialized, making your multi-core processor single-core when doing anything I/O bound
We saw between 500% - 800% increases in build times with their software installed
Well, that’s spectacular. What do you guys use now?
We’re still using them on machines where performance doesn’t matter
On build machines, they’re on a special VLAN and don’t have endpoint protection, but they only download from a protected mirror
We have a similar issue with defender, but those machines are internet connected, so we must have EDR on them.