News for hackers. Stuff that matters.

A comment on Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hours Prior Notice. Parent comment

Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by tptacek on Tuesday March 13, 2018 @06:40PM (#16580525)
Why do you assume that there were hundreds of other people looking for these vulnerabilities? Chances are, when we learn the technical details, we're going to find out that they're bog-standard memory corruption flaws in driver code, and that the thing that prevented anyone from discovering them was that nobody looked for them.
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by empath75 on Thursday March 15, 2018 @06:25PM (#16597000)
You honesty think nobody was looking for security vulnerabilities?
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by tptacek on Saturday March 24, 2018 @01:47PM (#16667821)
In drivers for an AMD security feature almost nobody uses? Yes.
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by flounders on Tuesday March 13, 2018 @09:18PM (#16581462)
Have you ever worked with a code base before? Even when you scrutinize for bugs, they still can go unspotted. Sometimes hundreds of people can look at the same code and not see anything wrong with it. Software has the benefit of having higher levels of abstraction, I haven't designed any hardware but as far as I'm aware it's not easy to abstract it. That will make it much harder to find things. While 4 guys in a basement may have found this vulnerability, it doesn't mean they will find every vulnerability or that anyone else would have this as they had. Throwing money at verification will not make it fool proof.
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by tptacek on Tuesday March 13, 2018 @09:38PM (#16581550)
I've been a professional software developer since 1995.
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by pvg on Wednesday March 14, 2018 @01:33AM (#16582591)
You should really say ‘94 instead.

http://www.cc.com/video-clips/cio5rg/chappelle-s-show-tupac-...

[ Parent | on HN ]