Don't know where it should go? Stick it here! Part VIII

Message boards : Cafe SETI : Don't know where it should go? Stick it here! Part VIII
Message board moderation

To post messages, you must log in.

Previous · 1 . . . 72 · 73 · 74 · 75 · 76 · 77 · 78 . . . 80 · Next

AuthorMessage
Profile Mr. Kevvy Crowdfunding Project Donor*Special Project $250 donor
Volunteer moderator
Volunteer tester
Avatar

Send message
Joined: 15 May 99
Posts: 3806
Credit: 1,114,826,392
RAC: 3,319
Canada
Message 2138558 - Posted: 20 Jul 2024, 0:52:40 UTC - in response to Message 2138552.  

I've seen quite a few posts of people asking for a copy of the file that caused all the carnage, curious as to just what it did to bring the systems down.


Given that the app. is an anti-malware suite and the repair directions, it's a kernel-mode (highest-privilege) code update possibly kernel-mode driver that was not tested before deployment or accidentally released or equivalent.

Their removal directions:

Boot Windows into Safe Mode or the Windows Recovery Environment
NOTE: Putting the host on a wired network (as opposed to WiFi) and using Safe Mode with Networking can help remediation.
Navigate to the %WINDIR%\System32\drivers\CrowdStrike directory
Note: On WinRE/WinPE, navigate to the Windows\System32\drivers\CrowdStrike directory of the OS volume
Locate the file matching “C-00000291*.sys” and delete it.
Boot the host normally.
ID: 2138558 · Report as offensive     Reply Quote
Admiral Gloval
Avatar

Send message
Joined: 31 Mar 13
Posts: 21289
Credit: 5,308,449
RAC: 0
United States
Message 2138781 - Posted: 26 Jul 2024, 7:03:04 UTC



ID: 2138781 · Report as offensive     Reply Quote
Profile Wiggo
Avatar

Send message
Joined: 24 Jan 00
Posts: 36808
Credit: 261,360,520
RAC: 489
Australia
Message 2138892 - Posted: 29 Jul 2024, 22:05:21 UTC

Seems that those Southern, and Northern, Lights are going to put on another show.

[url=Aussies turned their heads to the sky just months ago for what is usually a rare experience, but the lucky country will get another chance to witness it tonight.]Aussies turned their heads to the sky just months ago for what is usually a rare experience, but the lucky country will get another chance to witness it tonight.[/url]

I'm a bit too far north to see the display.

Cheers.
ID: 2138892 · Report as offensive     Reply Quote
Grant (SSSF)
Volunteer tester

Send message
Joined: 19 Aug 99
Posts: 13855
Credit: 208,696,464
RAC: 304
Australia
Message 2138896 - Posted: 29 Jul 2024, 23:05:25 UTC

Still got a bunch of floppies that you need to use every now & then?
If so, then this is what you need.

A car wash for floppy disks.
Grant
Darwin NT
ID: 2138896 · Report as offensive     Reply Quote
Profile Wiggo
Avatar

Send message
Joined: 24 Jan 00
Posts: 36808
Credit: 261,360,520
RAC: 489
Australia
Message 2138898 - Posted: 30 Jul 2024, 0:00:43 UTC - in response to Message 2138892.  

Seems that those Southern, and Northern, Lights are going to put on another show.

Aussies turned their heads to the sky just months ago for what is usually a rare experience, but the lucky country will get another chance to witness it tonight.

I'm a bit too far north to see the display.
Link fixed.

Cheers.
ID: 2138898 · Report as offensive     Reply Quote
Profile Carlos
Volunteer tester
Avatar

Send message
Joined: 9 Jun 99
Posts: 30681
Credit: 57,275,487
RAC: 157
United States
Message 2138919 - Posted: 30 Jul 2024, 12:50:44 UTC

NASA has a 30-minute forecast that shows you where the Aurora will be visible.
ID: 2138919 · Report as offensive     Reply Quote
Grant (SSSF)
Volunteer tester

Send message
Joined: 19 Aug 99
Posts: 13855
Credit: 208,696,464
RAC: 304
Australia
Message 2138935 - Posted: 30 Jul 2024, 22:44:26 UTC - in response to Message 2138898.  

Seems that those Southern, and Northern, Lights are going to put on another show.
Yep.
It kicked off again last night.













Grant
Darwin NT
ID: 2138935 · Report as offensive     Reply Quote
Profile zoom3+1=4
Volunteer tester
Avatar

Send message
Joined: 30 Nov 03
Posts: 66347
Credit: 55,293,173
RAC: 49
United States
Message 2138937 - Posted: 30 Jul 2024, 22:57:35 UTC - in response to Message 2138935.  

Neat pics Grant (SSSF), some would of course not say that, they would not approve, idiots.
Savoir-Faire is everywhere!
The T1 Trust, T1 Class 4-4-4-4 #5550, America's First HST

ID: 2138937 · Report as offensive     Reply Quote
Profile Mike Special Project $75 donor
Volunteer tester
Avatar

Send message
Joined: 17 Feb 01
Posts: 34380
Credit: 79,922,639
RAC: 80
Germany
Message 2138950 - Posted: 31 Jul 2024, 8:15:53 UTC

I love those pics too.


With each crime and every kindness we birth our future.
ID: 2138950 · Report as offensive     Reply Quote
Scrooge McDuck
Avatar

Send message
Joined: 26 Nov 99
Posts: 1190
Credit: 1,674,173
RAC: 54
Germany
Message 2138964 - Posted: 31 Jul 2024, 16:41:39 UTC

Really nice pics. Thanks for posting them here.

In 'regular' Aurora photos from northern arctic regions you mostly see greenish Aurora 'curtains'. The red ones are more rare. I only know that the color depends on which matter is forced to emit light energy: oxygen or nitrogen. I'm curious why in these lower latitude Aurora photographs you can only see red but not green colors.
ID: 2138964 · Report as offensive     Reply Quote
Admiral Gloval
Avatar

Send message
Joined: 31 Mar 13
Posts: 21289
Credit: 5,308,449
RAC: 0
United States
Message 2138969 - Posted: 31 Jul 2024, 19:10:53 UTC

The green we see in the aurora is characteristic of oxygen, while hints of purple, blue or pink are caused by nitrogen. “We sometimes see a wonderful scarlet red colour, and this is caused by very high altitude oxygen interacting with solar particles,”

ID: 2138969 · Report as offensive     Reply Quote
Profile zoom3+1=4
Volunteer tester
Avatar

Send message
Joined: 30 Nov 03
Posts: 66347
Credit: 55,293,173
RAC: 49
United States
Message 2138971 - Posted: 31 Jul 2024, 19:18:56 UTC

Very good pics, thanks, we'd never see the auroras since where I live it's either too hot or too cold at night or sometimes cloudy, normally we'd be too far away, but you never know how far south or north these lights might stretch.
Savoir-Faire is everywhere!
The T1 Trust, T1 Class 4-4-4-4 #5550, America's First HST

ID: 2138971 · Report as offensive     Reply Quote
Admiral Gloval
Avatar

Send message
Joined: 31 Mar 13
Posts: 21289
Credit: 5,308,449
RAC: 0
United States
Message 2139085 - Posted: 3 Aug 2024, 5:39:44 UTC



ID: 2139085 · Report as offensive     Reply Quote
Dr Who Fan
Volunteer tester
Avatar

Send message
Joined: 8 Jan 01
Posts: 3346
Credit: 715,342
RAC: 4
United States
Message 2139167 - Posted: 5 Aug 2024, 23:30:38 UTC

Thinking Hard Really Can Make Your 'Brain Hurt'
Folks who rub their forehead and complain that a complex problem is making their brain hurt aren’t overstating things, a new review suggests.

Mental exertion appears to be associated with unpleasant feelings in many situations, researchers reported Aug. 5 in the journal Psychological Bulletin.

In fact, the greater a person’s mental effort, the more they experience feelings like frustration, irritation, stress or annoyance, results showed.

“Our findings show that mental effort feels unpleasant across a wide range of populations and tasks,” said senior researcher Erik Bijleveld, an associate professor of psychology with Radboud University in the Netherlands.
ID: 2139167 · Report as offensive     Reply Quote
Grant (SSSF)
Volunteer tester

Send message
Joined: 19 Aug 99
Posts: 13855
Credit: 208,696,464
RAC: 304
Australia
Message 2139220 - Posted: 7 Aug 2024, 6:32:21 UTC

Article about CrowdStrike's analysis of what went wrong.
When updates are sent, it changes the location or the number of sensors to check for a potential attack.

In this instance, Falcon expected the update to have 20 input fields, but it had 21 input fields.

This "count mismatch" is what caused the global crash, CrowdStrike said.

"The Content Interpreter expected only 20 values," the RCA report states.
"Therefore, the attempt to access the 21st value produced an out-of-bounds memory read beyond the end of the input data array and resulted in a system crash."

Because Falcon is so tightly integrated into the core of Windows, when it crashed it bought down the entire system causing the BSOD.
....

"The fact that the CrowdStrike developers were able to have this obvious inconsistency between the data file format and the software code means that the most basic forms of quality review and assurance were not being correctly carried out."

Grant
Darwin NT
ID: 2139220 · Report as offensive     Reply Quote
rob smith Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer moderator
Volunteer tester

Send message
Joined: 7 Mar 03
Posts: 22534
Credit: 416,307,556
RAC: 380
United Kingdom
Message 2139221 - Posted: 7 Aug 2024, 6:52:26 UTC - in response to Message 2139220.  

If this line is actually true:
"Therefore, the attempt to access the 21st value produced an out-of-bounds memory read beyond the end of the input data array and resulted in a system crash."


Several stages of inspection and testing were not properly undertaken. At the very least:
A code walk of the new code would have flagged a potential problem;
Running the segment of code in a sandbox and feeding it "defective" data;
and doing much the same one the "sensor" side to make sure the sensors cannot send more than 20 items in their output array.

Add to that, making sure that erroneous data is safely handled and flagged as such, not just take that data and either crash the system or produce wrong results.

All in all a couple of very simple steps could so easily prevented this system crash. (Does that ring a bell?)
Bob Smith
Member of Seti PIPPS (Pluto is a Planet Protest Society)
Somewhere in the (un)known Universe?
ID: 2139221 · Report as offensive     Reply Quote
Profile Gary Charpentier Crowdfunding Project Donor*Special Project $75 donorSpecial Project $250 donor
Volunteer tester
Avatar

Send message
Joined: 25 Dec 00
Posts: 31012
Credit: 53,134,872
RAC: 32
United States
Message 2139222 - Posted: 7 Aug 2024, 6:52:33 UTC - in response to Message 2139220.  

Years ago, picked 20 because it was a huge number that never would be approached. Sounds about like Y2K and just two digits for the year. Or Unix End of Time.

As to tightly integrated - they wrote a kernel driver -- code that can't crash and must catch all its errors itself.
ID: 2139222 · Report as offensive     Reply Quote
Grant (SSSF)
Volunteer tester

Send message
Joined: 19 Aug 99
Posts: 13855
Credit: 208,696,464
RAC: 304
Australia
Message 2139288 - Posted: 9 Aug 2024, 6:39:24 UTC


Grant
Darwin NT
ID: 2139288 · Report as offensive     Reply Quote
W-K 666 Project Donor
Volunteer tester

Send message
Joined: 18 May 99
Posts: 19401
Credit: 40,757,560
RAC: 67
United Kingdom
Message 2139444 - Posted: 14 Aug 2024, 7:21:37 UTC

ID: 2139444 · Report as offensive     Reply Quote
Admiral Gloval
Avatar

Send message
Joined: 31 Mar 13
Posts: 21289
Credit: 5,308,449
RAC: 0
United States
Message 2139448 - Posted: 14 Aug 2024, 8:27:18 UTC

I understand arson but hot plum pudding is going a bit far. Ouch!!

ID: 2139448 · Report as offensive     Reply Quote
Previous · 1 . . . 72 · 73 · 74 · 75 · 76 · 77 · 78 . . . 80 · Next

Message boards : Cafe SETI : Don't know where it should go? Stick it here! Part VIII


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.