02-08-2024
Episode 0x05
Welcome back to The Changelog! In this fifth episode, hosts Viktor and Daniel dive into the latest industry updates, bringing you insights from the tech world, security debacles, and more. After a brief summer hiatus, the duo returns to dissect one of the biggest recent tech fiascos—the CrowdStrike debacle that disrupted the globe, from airlines to emergency services.
The CrowdStrike Catastrophe: A Perfect Storm
The episode kicks off with a deep dive into the CrowdStrike incident that affected an estimated 8.5 million devices worldwide. Viktor and Daniel recount how a poorly executed update led to a catastrophic blue screen of death scenario, requiring manual intervention to recover devices. They discuss the root causes, including bypassed automated checks and a lack of proper testing, which resulted in a crash loop early in the boot process of Windows devices. The hosts highlight the immense challenge of resolving this issue, especially for devices with BitLocker encryption, which required entering long passphrases manually.
The Ripple Effects and Financial Toll
The financial impact of this disaster is staggering, with estimates suggesting costs as high as $4 billion. Viktor and Daniel explore the broader implications, from the disruption of critical services like 911 in Alaska to the shutdown of airports for days. They also discuss the internal fallout within CrowdStrike and the responsibilities of other involved parties, such as Microsoft, in ensuring such vulnerabilities don’t cripple systems again.
The Need for Better Deployment Strategies
The conversation then shifts to the importance of deployment strategies. Viktor shares insights into canary deployments, a method where updates are initially rolled out to a small subset of devices before broader deployment, minimizing the risk of widespread failure. They emphasize the need for IT teams to better gatekeep updates, ensuring thorough testing and gradual rollouts to avoid repeating such massive failures.
Screenly and Secure by Design: Leading the Way in Signage Security
Viktor introduces Screenly’s involvement in the Secure by Design program, an initiative spanning multiple countries and agencies aimed at enhancing software security. Screenly is the first signage company to join this program, which advocates for radical transparency and improved supply chain security. The discussion covers the principles of Secure by Design, emphasizing the importance of ownership of security outcomes, rigorous testing, and the use of advanced programming languages like Rust for enhanced security and performance.
The Role of Software Bill of Materials (SBOM)
An essential part of Secure by Design is the concept of SBOM—Software Bill of Materials. Viktor explains how SBOMs provide a transparent list of components used in software, helping companies track vulnerabilities and ensure compliance with licensing policies. He shares how Screenly is working towards providing SBOMs to customers, aligning with regulatory requirements and industry best practices to enhance security transparency.
The Debate Over Digital Out-of-Home Signage in Switzerland
The episode wraps up with a discussion on Switzerland’s decision to ban outdoor digital out-of-home advertisements in certain areas, citing visual pollution. Viktor and Daniel weigh the pros and cons, considering the environmental arguments and the potential shift of advertising dollars to other media. They explore the broader implications for the digital signage industry and the balance between technological advancement and maintaining aesthetic and environmental standards.
Looking Ahead
As the tech world navigates these complex challenges, Viktor and Daniel promise more exciting updates in future episodes. With summer vacations ending and everyone get
