Episode 0x05

Welcome back to The Changelog! In this fifth episode, hosts Viktor and Daniel dive into the latest industry updates, bringing you insights from the tech world, security debacles, and more. After a brief summer hiatus, the duo returns to dissect one of the biggest recent tech fiascos—the CrowdStrike debacle that disrupted the globe, from airlines to emergency services.

The CrowdStrike Catastrophe: A Perfect Storm

The episode kicks off with a deep dive into the CrowdStrike incident that affected an estimated 8.5 million devices worldwide. Viktor and Daniel recount how a poorly executed update led to a catastrophic blue screen of death scenario, requiring manual intervention to recover devices. They discuss the root causes, including bypassed automated checks and a lack of proper testing, which resulted in a crash loop early in the boot process of Windows devices. The hosts highlight the immense challenge of resolving this issue, especially for devices with BitLocker encryption, which required entering long passphrases manually.

The Ripple Effects and Financial Toll

The financial impact of this disaster is staggering, with estimates suggesting costs as high as $4 billion. Viktor and Daniel explore the broader implications, from the disruption of critical services like 911 in Alaska to the shutdown of airports for days. They also discuss the internal fallout within CrowdStrike and the responsibilities of other involved parties, such as Microsoft, in ensuring such vulnerabilities don’t cripple systems again.

The Need for Better Deployment Strategies

The conversation then shifts to the importance of deployment strategies. Viktor shares insights into canary deployments, a method where updates are initially rolled out to a small subset of devices before broader deployment, minimizing the risk of widespread failure. They emphasize the need for IT teams to better gatekeep updates, ensuring thorough testing and gradual rollouts to avoid repeating such massive failures.

Screenly and Secure by Design: Leading the Way in Signage Security

Viktor introduces Screenly’s involvement in the Secure by Design program, an initiative spanning multiple countries and agencies aimed at enhancing software security. Screenly is the first signage company to join this program, which advocates for radical transparency and improved supply chain security. The discussion covers the principles of Secure by Design, emphasizing the importance of ownership of security outcomes, rigorous