this post was submitted on 19 Jul 2024
778 points (94.5% liked)

Linux

48067 readers
767 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

This isn't a gloat post. In fact, I was completely oblivious to this massive outage until I tried to check my bank balance and it wouldn't log in.

Apparently Visa Paywave, banks, some TV networks, EFTPOS, etc. have gone down. Flights have had to be cancelled as some airlines systems have also gone down. Gas stations and public transport systems inoperable. As well as numerous Windows systems and Microsoft services affected. (At least according to one of my local MSMs.)

Seems insane to me that one company's messed up update could cause so much global disruption and so many systems gone down :/ This is exactly why centralisation of services and large corporations gobbling up smaller companies and becoming behemoth services is so dangerous.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 55 points 3 months ago* (last edited 3 months ago) (2 children)

And if it was a kernel-level driver that failed, Linux machines would fail to boot too. The amount of people seeing this and saying “MS Bad,” (which is true, but has nothing to do with this) instead of “how does an 83 billion dollar IT security firm push an update this fucked” is hilarious

[–] [email protected] 10 points 3 months ago* (last edited 3 months ago) (2 children)

Falcon uses eBPF on Linux nowadays. It's still an irritating piece of software, but it no make your boxen fail to boot.

edit: well, this is a bad take. I should avoid commenting on shit when I'm sleep deprived and filled with meeting dread.

[–] [email protected] 12 points 3 months ago

Even if it doesn't kernel panic, a broken eBPF program can break all networking and I/O and effectively cripple a "running" system.

eBPF is better in a lot of aspects, but it won't prevent software intended to block syscalls from breaking your machines if the code breaks.

The solution posted everywhere, simply delete the broken driver files, isn't difficult or time consuming, except for situations where tens of thousands of devices stop responding at once, or where every machine is asking you for the encryption key because you've altered your boot parameters. Linux' saving grace here may be that Bitlocker-style encryption is a pain to set up so Linux servers typically don't do the encryption at all, but the recovery process for enterprise customers would still be very manual and time consuming.

[–] [email protected] 11 points 3 months ago (1 children)

It was panicking RHEL 9.4 boxes a month ago.

[–] [email protected] 4 points 3 months ago (1 children)

Were you using the kernel module? We're using Flatcar which doesn't support their .ko, and we haven't been getting panics on any of our machines (of which there are many).

[–] [email protected] 6 points 3 months ago

Nah it was specifically related to their usage of BPF with the Red Hat kernel, since fixed by Red Hat. Symptom was, you update your system and then it panics. Still usable if you selected a previous kernel at boot though.

[–] [email protected] 0 points 3 months ago (1 children)

You're asking the wrong question: why does a security nightmare need a 90 billion dollar company to unfuck it?

[–] [email protected] 3 points 3 months ago (1 children)

What’s your solution to cyberattacks?