5 ms·
These are interesting "security flaws," given the level of access an attacker needs to exploit these. I wonder what (other) security professionals have to say
by ken47 9y ago
These are interesting "security flaws," given the level of access an attacker needs to exploit these.
I wonder what (other) security professionals have to say about this white paper.
- tjwds 9y agoAlso curious that "safefirmware.com" — where the whitepaper is hosted — doesn't seem to have any history whatsoever.
- dogma1138 9y agoCTS will be launching a firmware security analysis service/tool for the enterprise market in the coming months this is likely a PR domain for that, and also likely the reason behind this whole "campaign". It's similar to what Peach (Fuzzer) did after they've (co)"discovered" Heartbleed however that was handled much better.
- rlabrecque 9y agoMany of these are real problems, but they are way overblown. There's a big difference between a break and enter, and "The airbnb guest stole my lamp when he left!"
- zaarn 9y agoNot a security researcher but this looks like the security leaflet I got from my (ex-)A/V vendor. Which mostly screamed "OH MY GOD MALWARZ" There is a good number of red flags all over this site, including the non-existent disclosure timeline, I would say the chance this is for real is basically 0.
- rishabhd 9y agoRelevant https://twitter.com/cynicalsecurity/status/973591954096381952?s=19 https://twitter.com/cynicalsecurity/status/97359195409638195... https://doublepulsar.com/on-amd-flaws-from-cts-labs-f167ea00e4e8 https://doublepulsar.com/on-amd-flaws-from-cts-labs-f167ea00...