4 ms·

Thanks for pointing out this little gem. I hope Google can be a little less responsible for independent company intel in the future.

• dogma1138 9y ago
  Google didn't respect the embargo for the financial sake of Intel but for both it's own sake and the sake of all of it's users, as well as most computer users out there regardless if they use Google services or not. Sure Intel put a PR spin on it, but any company would do that, but at least the patches were ready from the get go even tho the information started leaking a week prior to the official embargo date. Would you rather having to wait 2-4 months without any mitigating solutions other than turning off your PC? People are focusing too much on Meltdown, it's not the worse variant of Spectre, Variant 2 is much worse, and the possibility of future variants is even scarier. I don't see anything wrong with companies spending 5-6 months on coordinating mitigation and fixes as well as building knowledge that can be used for future research and prevention of similar vulnerabilities.
  • whyever 9y ago
    You seem to be assuming no one else found and exploited the vulnerability in the meantime.
    • dogma1138 9y ago
      Say someone has found it before, it's likely better to have 1 nation state exploiting it for 3 more months longer than every script kiddy on the block. These vulnerabilities affect nearly every CPU on the planet across all major CPU vendors, this isn't something your disclose immediately to teach someone a lesson or just to watch the world burn. Do you think Google would want to leave their infrastructure vulnerable for months?