Technology

59534 readers

3143 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

214

TSA silent on CrowdStrike’s claim Delta skipped required security update (arstechnica.com)

submitted 3 weeks ago by jeffw@lemmy.world to c/technology@lemmy.world

17 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] jaybone@lemmy.world 18 points 3 weeks ago (1 children)

Wait I thought this was caused by a security update.

Are they saying there was a security update that would have prevented the CrowdStrike update from bricking everything?

[–] jeffw@lemmy.world 3 points 3 weeks ago (1 children)

Different security step.

In March 2023, the TSA added a cybersecurity emergency amendment to its cybersecurity programs. The amendment required airlines like Delta to develop "policies and controls to ensure that operational technology systems can continue to safely operate in the event that an information technology system has been compromised," CrowdStrike's complaint said.

[–] jaybone@lemmy.world 2 points 3 weeks ago (1 children)

Yeah I read it. So is CrowdStrike going to argue that some other software update was supposed to have been installed by Delta prior to CrowdStrike’s update?

That’s my question.

[–] Pika@sh.itjust.works 4 points 3 weeks ago* (last edited 3 weeks ago)

No they are going to argue that there should have been a fail safe in place for a rapid recovery of said incident occurring in the first place. Since the TSA required it

I personally don't think that should resolve crowdstrike of all responsibility, but the fact that they lack these contingency plans in the first place makes me think that CS is definitely not the only one at fault here