care to enlighten us about this statement, wise one? > For instance, AI90 is exploitable on some operating systems (but not OpenBSD running default binaries).

care to enlighten us about this statement, wise one? > For instance, AI90 is exploitable on some operating systems (but not OpenBSD running default binaries). if you know how the processor and OS behaves at a low level, and read specific hardware errata which you know will cause problems that logically cannot be worked around, developing a proof of concept (aka 'discovering') is simply a waste of time and effort..