4 ms·

Maybe author did not want to deal with Lenovo. > Lenovo did not develop the vulnerable SMM code and is still in the process of determining the identity of the

by jkot 10y ago

Maybe author did not want to deal with Lenovo. > Lenovo did not develop the vulnerable SMM code and is still in the process of determining the identity of the original author, it does not know its originally intended purpose.

cdubzzz 10y ago
True. The part of the statement that stands out to me is the word "collaborate", which seems to imply that they made some sort of contact (since they didn't say "unsuccessful attempts to contact") so your theory may be accurate. Although based on the author's original blog post and title for the GitHub repo, it seems that he originally thought it was Lenovo specific...
ssebastianj 10y ago
The author (Dmytro Oleksiuk) tweeted [0]: 'Dear vendors, “give us your 0day vulnerability for free and don’t publish anything” — it’s not a cooperation request'. [0] https://twitter.com/d_olex/status/748806692754714625 https://twitter.com/d_olex/status/748806692754714625
- cdubzzz 10y ago
  Thanks for pointing that out. Glad to see in the thread that he is also planning to post information about what his requested terms were.
- retox 10y ago
  So he's holding them to random?
  - Nadya 10y ago
    Not by the looks of it. > I agreed to do that, but they haven't accepted my terms and conditions (just for case -- I haven't asked them about money)
    - retox 10y ago
      I stand corrected, thanks.
- jimrandomh 10y ago
  His Twitter tagline is: "... aka Cr4sh, unethical hacker". He put "unethical" in his own damn profile, I don't think he deserves the benefit of doubt.
  - deleted 10y ago
    [deleted]
  - ry_ry 10y ago
    If he was that unethical we wouldn't be discussing public disclosure here.