News for hackers. Stuff that matters.

A comment on Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hours Prior Notice. Parent comment

Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by viraptor on Tuesday March 13, 2018 @07:36PM (#16580877)
Close to 100% of software has bugs. Almost all drivers have bugs. Anything that prioritises company profit and release dates over complete correctness in sectors where bugs == deaths, will have bugs. (And even those sectors are not magically immune) So yes - I expect they do.
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by tptacek on Tuesday March 13, 2018 @07:44PM (#16580939)
So are vendors who release buggy drivers not "dicks" for the same reason that chip manufacturers aren't?
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by viraptor on Wednesday March 14, 2018 @04:20AM (#16583166)
Unless they released it maliciously, I don't hold it against them. And wouldn't call anyone a dick unless they planned to do something evil.

Exceptions: issue was known but got ignored due to release schedule, or security was never mentioned in the project and at no level was there any security consideration. But that's for specific management issues, not engineers or the vendor in general.

[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by tptacek on Wednesday March 14, 2018 @09:33AM (#16584602)
That's an incredibly low bar. All you have to do to meet is is not actively look for security vulnerabilities in your products.
[ Parent | on HN ]