Re:Intel Issues Updates to Protect Systems from Security Exp...
by mort96 on Thursday January 04, 2018 @04:34PM
(#16074284)
We know (or can guess) approximately when the project zero team discovered the issue, but I think your parent comment meant that we don't know when _someone_ discovered it first. Maybe the project zero team were the very first to discover it, or maybe some state actor discovered it a decade ago and has been using it since then.
Re:Intel Issues Updates to Protect Systems from Security Exp...
by bri3d on Thursday January 04, 2018 @04:25PM
(#16074230)
Right - but as always with a vulnerability, especially one that's borderline-undetectable through any kind of log analysis, the question becomes "were Google really the first to think of this?" and the tinfoil kingdom builds itself from there.
> We reported this issue to Intel, AMD and ARM on 2017-06-01.
I don't think they have been twidling their thumbs with such a huge discovery without informing constructors.
[1] https://googleprojectzero.blogspot.com/2018/01/reading-privi...