4 ms·

Thanks for sharing those details. Deferring to OEMs is such a copout given how they are most likely going to handle security issues: https://twitter.com/avtarg

by avtar 9y ago

Thanks for sharing those details. Deferring to OEMs is such a copout given how they are most likely going to handle security issues: https://twitter.com/avtargill/status/951195158229463046?s=17 https://twitter.com/avtargill/status/951195158229463046?s=17 At this point it’s up to users to scour motherboard manufacturers’ clunky forums to determine if their platforms will ever receive patches. Given the severity of the issue this really should be handled with more accountability and with a greater sense of urgency.

Spooky23 9y ago
It’s also a cop out as they were leaning on the assessments of the vulnerability as a medium risk information disclosure by many security analysts. That is accurate in many respects, but not in the context of a multi tenant environment or in places where different compliance standards are in play. It’s particularly obnoxious when you read about the heroic efforts that were put in place to put AWS, Azure and GCP right. If it was no big deal, why go through that?