2 ms·
A security researcher claims to have access to the full (non-public) technical report as well as PoC exploits for it. He says they're legit, and they are flaws
by paulmd 9y ago
A security researcher claims to have access to the full (non-public) technical report as well as PoC exploits for it. He says they're legit, and they are flaws, not just "you can do admin things with an admin password".
https://twitter.com/dguido/status/973628511515750400 https://twitter.com/dguido/status/973628511515750400
Sounds like the capabilities include the ability to jump outside a VM sandbox, take over the PSP, and pivot to the firmware or BIOS exploits.
https://www.techpowerup.com/242328/13-major-vulnerabilities-discovered-in-amd-zen-architecture-including-backdoors https://www.techpowerup.com/242328/13-major-vulnerabilities-...
- pishpash 9y agoHow do we know this guy's not a conspirator?
- paulmd 9y agoTrack record of research/publications in the field? https://www.trailofbits.com/research-and-development/published-research/ https://www.trailofbits.com/research-and-development/publish... Ian Cutress of Anandtech appears to be quasi-vouching for Dan Guido. Ian is also interviewing CTS Labs tomorrow morning, and looking for questions. https://twitter.com/IanCutress/status/973678700687450113 https://twitter.com/IanCutress/status/973678700687450113 https://twitter.com/IanCutress/status/973697525071994880 https://twitter.com/IanCutress/status/973697525071994880
- deleted 9y ago[deleted]