this post was submitted on 20 Jul 2024
18 points (76.5% liked)

Technology

34414 readers
604 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 7 points 1 month ago (2 children)

Updating individual machines is a long manual process:

The file in question is a CrowdStrike driver located at Windows/System32/Drivers/CrowdStrike/C-00000291*.sys. Once it's gone, the machine should boot normally and grab a non-broken version of the driver.

Deleting that file on each and every one of your affected systems individually is time-consuming enough, but it's even more time-consuming for customers using Microsoft's BitLocker drive encryption to protect data at rest. Before you can delete the file on those systems, you'll need the recovery key that unlocks those encrypted disks and makes them readable (normally, this process is invisible, because the system can just read the key stored in a physical or virtual TPM module).

https://arstechnica.com/information-technology/2024/07/crowdstrike-fixes-start-at-reboot-up-to-15-times-and-get-more-complex-from-there/

[โ€“] [email protected] 2 points 1 month ago* (last edited 1 month ago) (2 children)

Okay, so that is all it is. I feel like that didn't need an article lol

[โ€“] [email protected] 2 points 1 month ago

that's why I quoted the relevant bits :)

[โ€“] [email protected] 1 points 1 month ago

Have you seen how long a bit locker key is?? You have to type in a unique key for every computer. Luckily there is only numbers in the keys.

[โ€“] [email protected] 1 points 1 month ago

There's a powershell script to do this.