vegeta@lemmy.world to Technology@lemmy.worldEnglish · 29 days agoCrowdStrike unhappy with “shady commentary” from competitors after outagearstechnica.comexternal-linkmessage-square103fedilinkarrow-up1556arrow-down18
arrow-up1548arrow-down1external-linkCrowdStrike unhappy with “shady commentary” from competitors after outagearstechnica.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 29 days agomessage-square103fedilink
minus-squareozymandias117@lemmy.worldlinkfedilinkEnglisharrow-up4·28 days agoOh god. Sentinel one is horrible. If they’re taking issue with your testing, you’ve really screwed the pooch
minus-square𝕸𝖔𝖘𝖘@infosec.publinkfedilinkEnglisharrow-up1·28 days agoHorrible how? I’ve always thought they were pretty solid in the arena.
minus-squareozymandias117@lemmy.worldlinkfedilinkEnglisharrow-up3·edit-228 days agoTheir ftrace hooks caused all disk usage to be serialized, making your multi-core processor single-core when doing anything I/O bound We saw between 500% - 800% increases in build times with their software installed
minus-square𝕸𝖔𝖘𝖘@infosec.publinkfedilinkEnglisharrow-up2·28 days agoWell, that’s spectacular. What do you guys use now?
minus-squareozymandias117@lemmy.worldlinkfedilinkEnglisharrow-up3·28 days agoWe’re still using them on machines where performance doesn’t matter On build machines, they’re on a special VLAN and don’t have endpoint protection, but they only download from a protected mirror
minus-square𝕸𝖔𝖘𝖘@infosec.publinkfedilinkEnglisharrow-up1·28 days agoWe have a similar issue with defender, but those machines are internet connected, so we must have EDR on them.
Oh god. Sentinel one is horrible. If they’re taking issue with your testing, you’ve really screwed the pooch
Horrible how? I’ve always thought they were pretty solid in the arena.
Their ftrace hooks caused all disk usage to be serialized, making your multi-core processor single-core when doing anything I/O bound
We saw between 500% - 800% increases in build times with their software installed
Well, that’s spectacular. What do you guys use now?
We’re still using them on machines where performance doesn’t matter
On build machines, they’re on a special VLAN and don’t have endpoint protection, but they only download from a protected mirror
We have a similar issue with defender, but those machines are internet connected, so we must have EDR on them.