4 ms·
> the "Lazy FPU" vulnerability in 2018 You mean that OpenBSD discovered this issue by themselves when they were left out of an ongoing embargo? Please explain
by bjpbakker 8y ago
> the "Lazy FPU" vulnerability in 2018
You mean that OpenBSD discovered this issue by themselves when they were left out of an ongoing embargo?
Please explain to me how one can break an embargo they are not a part of in the first place?
- cperciva 8y agoThey didn't discover it themselves. If they had, how would they have known who was part of the embargo and when it was scheduled to end? Someone leaked it to them.
- ryacko 8y agoPeople make inferences all the time. In order to discover security vulnerabilities in the first place, you have to make inferences about how permissions or memory accesses are mishandled.
- bjpbakker 8y ago“discovered by themselves” was intended to read “discovered outside of the embargo”. Since you didn’t answer my question, let me try again. How can someone break an embargo they’re not a part of? To me the mess back then was a very convenient distraction from the real issue, for Intel and their embargo.
- cperciva 8y agoOpenBSD didn't break the embargo. Whoever leaked it to them broke the embargo (and is very very lucky that nobody is saying who it was).