3 ms·
My second thought - Perhaps embargo with limited length can help, but it only solves the problem of endless embargo. But the following remains unaddressed... >
by segfaultbuserr 7y ago
My second thought - Perhaps embargo with limited length can help, but it only solves the problem of endless embargo. But the following remains unaddressed...
> Intel's mitigation plan being PoC-oriented with a complete lack of security engineering and underlying root cause analysis
Being PoC-oriented means that even if there is full disclosure, Intel is still going to patch PoCs in an ad-hoc manner, rather than a full fix.
Also, if you have full disclosure of a potential problem without PoC, it doesn't solve the problem - Intel can choose to ignore it by not doing a careful root-cause analysis, and fix the problem if there is any.