AMD Security Issues

same with Pauls Hardwar:

I’m still glad I went back to the harsh embrace of the red team :slight_smile:

1 Like

This is quite well analyzed…

Totally missed all of this until now… all of this nothingness. :rofl:

3 Likes

Need to list all the sources that jumped on this and ran with it without actually doing any investigation…

2 Likes

Something that should raise a lot of eyebrows:

CTS-Labs = Catenoid = Flexgrid Systems Inc.

Among the things they’ve made include the CrowdCores AdWare.

This gives us some hints about a lot of the scummy behavior.

3 Likes

Still seeing a tonne of stories coming through in my feeds over these ‘serious vulnerabilities’.


watching rn @RevampedTech
3 Likes

Getting sick and tired of ‘journalists’ copying and pasting press releases without any amount of digging

Israeli security firm uses non https for it’s own site, claiming legitimacy (Community Friendly Post Edition)

I’m skeptical about Spectre and Meltdown in the first place. Theres no actual proof that its real, its just that an operation works correctly and can be copied. Oh no! My processor is working like its supposed to!

How terrifying T-T

1 Like

Anything that works could break! Be Careful! /s

And thats why people believe propaganda.

Your processors are fine, shut the fuck up already.

2 Likes

Lay off the /pol/ please.

2 Likes

There are absolutely POCs for Meltdown and Spectre available. A simple google for “meltdown poc” will bring them up. They aren’t fake.

Security Now took a little heat for reporting early. Wonder what their followup will be.

Why you gotta be like that?

1 Like

No previous history. No exploit code. No proof of concept. Admitted financial ties. Backed up by a hysterical paper by a bunch of unknowns. Requirement for signed driver abuse, administrator/root access and BIOS flashes.

File under

“bullshit”.

2 Likes

Unfortunately ‘headlines’ (which is what a lot of people read, not the full story) keep on giving them legitimacy

http://www.tomshardware.com/news/cts-labs-amd-ryzenfall-ryzen-epyc,36660.html

Second indication that there actually are some kind of real vulnerability. Maybe we’ll see POC soon?

See also https://arstechnica.com/information-technology/2018/03/a-raft-of-flaws-in-amd-chips-make-bad-hacks-much-much-worse/

The vulnerabilities may well be real, but if their descriptions are accurate nobody should care, because they’re all very low criticality.

1 Like