Suggestions
Patrick Kerpan
CEO at Cohesive Networks
Patrick Kerpan is the CEO and co-founder of Cohesive Networks, a company that provides security and connectivity solutions for cloud-based applications.13 He has extensive experience in the technology industry, spanning both entrepreneurial ventures and enterprise IT roles.
Key points about Patrick Kerpan:
-
Professional background:
-
Education:
-
Entrepreneurial experience:
-
Industry focus:
-
Current role:
-
Social media:
Patrick Kerpan's career demonstrates a strong background in software development, cloud technologies, and entrepreneurship, with a focus on creating innovative solutions for cloud security and networking.
Highlights
Yes it is Friday. And yes I am leading "Claude Anthropic" as a witness. BUT...Microsoft you really need to do better. In this case Azure storage API.
(And would be thrilled to discover there is a simpler API call, as opposed to AZcopy which is simple but cannot be made to run multi-threaded/securely without a ton of work. Incidentally, Azure Co-pilot shrugs and says use powershell.)
About the recent CrowdStrike events...
At the heart of it, we question having the same agenting approach for computers used by humans, versus computers used by computers.
We put a longer piece up here: https://lnkd.in/gmEFjHKa
With business servers, the computers that are not the personal device of an end-user, but rather are there to perform a function like database or API serving or message queuing, why agent them?
(For my company it is easier in that Windows is not allowed, business services are built on Linux.)
Whether Windows or Linux, when it is computers used by computers, why are you ‘protecting’ the computer instead of the network? Those business servers are not going to click on links, browse bad websites, or download malware. They are automatons performing specific, repetitive operations.
This is where we are skeptical of the agent approach and will not allow it for our network appliances, and as applicable would not allow for business services.
We think these are the rules to follow:
-
Computer primarily used by human and it has to be Windows, agent it and anti-virus it.
-
Computer primarily used by human and is Mac or Linux, anti-virus it.
-
Computer used by computers, both micro-segment and protect the network, use a security lattice. The risk from any agents are too high.
-
(OPTIONAL) Computers used by computers are ideally Linux servers using the distributions’ minimal install with at least some elements of CIS hardening.
Now, it this all CrowdStrike's fault, certainly not. The organizations that allow a 3rd party to just push to production have some explaining to do. More on that to follow.
