[bostik]

All these endpoint protection solutions do complex things in the lowest levels of the OS and inside the kernel. Their MO is to inspect, intercept, block and/or modify calls made by other software on the system.

We used to have a name for software like that in the 1990's. We called them rootkits.

[iforgotpassword]

But it checks a box somewhere so it has to be good. How can anyone run an IT infrastructure without buying a dozen "security" solutions in this day and age? Just designing your network with security in mind instead? Are you nuts?

[TheNewsIsHere]

There’s a non-trivial element behind all of this class of software, which is that humans are gonna human. Whether that’s a constant cat and mouse game in which your X number of employees are fodder who will inevitably click the wrong thing at the wrong time, or a zero-day laden worm that might be stoppable with enough eyeballs and some manner of heuristics that can automatically roll out some countermeasure.

Here on HN we generally understand technology well enough that most of us probably don’t need all these safeguards. James in accounting absolutely does, though.

There are a lot of “James in accounting”s out there, and a lot of them run or manage the companies that make the line of business software that everyone else relies on.

I’ve been studying the news coverage outside the tech sphere and the way people talk about this outage betrays exactly why software like this exists in the first place.