On: The CrowdStrike file that broke everything was ful...

[chrisjj]

I think we do have enough info to judge e.g. :This should not have passed a competent C/I pipeline for a system in the critical path."

Thay info includes that the faulty file consisted entirely of zeros.

[arp242 → chrisjj]

> That info includes that the faulty file consisted entirely of zeros.

Even that is not certain. Some people are reporting that this isn't the case and that the all-zeroed file may be a "quick hack" to send out a no-op.

So no, we have very little info.

[chrisjj → arp242]

But the all-zero file is version CS has IDed as the cause, right?

[zmatt → chrisjj]

No, CS has explicitly stated that the cause was a logic error in the rules file. They have also stated "This is not related to null bytes contained within Channel File 291 or any other Channel File."