[ilkkao]

Some government should force them to release a technical postmortem. Feels that they don't do it otherwise.

[educasean]

There should be congressional hearings on this. Not just post mortems.

[CoastalCoder]

Honest question: would you expect Congress to respond in a way that's a true net-positive?

[gen3]

I don’t think a cybersecurity company can take down half the US and not release a postmortem

[spuz]

Of course, but we specifically would like to see a _technical_ postmortem that examines what kind of incremental rollout procedures they have and how this update overcame those.

[aeyes]

Or... you know... This kind of software should be open source or companies using it should at least be able to audit the code themselves.

Supposedly they have all kinds of certifications but not even having basic QA demonstrates that this is all just a smokeshow: https://www.crowdstrike.com/why-crowdstrike/crowdstrike-comp...