3 ms·
Anything that describes itself as a "severe security advisory", but doesn't come with a CVE entry up front is really shady. There's no disclosure timeline. Was
by detuur 9y ago
Anything that describes itself as a "severe security advisory", but doesn't come with a CVE entry up front is really shady.
There's no disclosure timeline. Was AMD ever informed of the "vulnerabilities" and if so, when, and what their responses were? Nothing suggests as such.
There's no concise explanation of the risk. What exactly is the danger here? The website only shouts in my face that everything is wrong but not how.
The name "Ryzenfall" really sounds like they came up with the name first and looked for a vulnerability second.
The phrasing of "Severe Security Advisory" is deceptive. Sounds like it's coming from AMD, it's not.
Lots of smoke, a tonne of it actually. But I don't see anything else to suggest there's actually a fire.