3 ms·
What's wrong with full disclosure? Ryzen owners ought to be informed ASAP that they're (possibly) vulnerable.
by ad_hominem 9y ago
What's wrong with full disclosure? Ryzen owners ought to be informed ASAP that they're (possibly) vulnerable.
- yjftsjthsd-h 9y agoThen why any notice? 24 hours is useless; it almost sounds like they want to claim they disclosed in advance without usefully doing so.
- GordonS 9y agoWhat can AMD do with 24h notice? Could they even verify the veracity of the claim in that time? As am AMD system owner, I would much prefer that big flaws were disclosed in a coordinated manner with AMD - giving them a fair chance to verify and find a solution, rather than giving bad actors a head start.
- pbhjpbhj 9y agoDepends on the flaw, might give them long enough to make a fix [1] (they might have one in the pipeline, or one they kept from release because of effects on speed, you never know) but more than likely gives them long enough to decide _how_ to handle it. [1] I'm partially recalling a fix, on Facebook I think, that was implemented within a few hours of reporting; it was ac testing API that got exposed. Different field, of course.