5 ms·
The timetable is a bit strewn throughout the article, but from what I can make out: June: Google reports the problem to Intel. Soon after: Intel/Google (uncle
by Groxx 9y ago
The timetable is a bit strewn throughout the article, but from what I can make out:
June: Google reports the problem to Intel.
Soon after: Intel/Google (unclear) informs related businesses (Lenovo, Microsoft, Amazon, ARM Holdings, others?).
Jan 3: Vulnerability leaked ahead of planned Jan 9 reveal.
A 6 month window where apparently nobody informed the US Gov. I'm legitimately kinda surprised - if it were a small window, meh, but clearly they (and every other government) would have wanted an earlier warning since they'd likely be vulnerable. That's a gigantic window for the info to leak and an automated exploit to be built (just look how fast it happened when the news became public).
- empath75 9y agoThere is approximately zero chance that someone at the NSA didn’t find out about it before it was publicly announced.
- angry_octet 9y agoAnd it has to be assumed that they would already by monitoring the Swiss research team also.
- foobarbazetc 9y ago“Soon after” == “November 29” according to this article: https://www.itwire.com/security/81538-intel-ceo-sold-shares-on-same-day-oems-informed-of-bugs-report.html https://www.itwire.com/security/81538-intel-ceo-sold-shares-...
- Groxx 9y agoThanks! I was hoping there were dates somewhere... ...but as a counterpoint, this says June in the sub-heading: https://www.wsj.com/articles/intel-wrestled-with-chip-flaws-for-months-1515110151 https://www.wsj.com/articles/intel-wrestled-with-chip-flaws-... (though I can't find supporting info in the body) I'd love to find something conclusive :\ seems like everyone's implying different things / nobody actually has concrete evidence or dates.