Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hours Prior Notice

Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by chrisbennet on Tuesday March 13, 2018 @08:04PM (#16581064)

”The premise of your argument is that without vendor cooperation, end-users are helpless to mitigate the impact of security flaws.”

I know everyone in my family is ignorant of this “disclosed” security flaw and is powerless to mitigate the vulnerabilities disclosed on their own. Even if they did know to “turn off their computer” as someone said, are they supposed to wait until someone calls them to tell them a patch is ready?

Disclosing a vulnerability for profit at the expense of everyone else is a shitty thing to do. Would giving AMD a few days to fix it have hurt as many people as giving them one day?

[ Parent | on HN ]

Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by tptacek on Tuesday March 13, 2018 @08:10PM (#16581098)

How many vulnerabilities are you capable of finding in software that everyone in your family uses, and can't find for themselves? I'm sure the number is not zero. Is it unethical for you not to go look for them?

[ Parent | on HN ]

Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by kelnos on Tuesday March 13, 2018 @11:51PM (#16582143)

Looking is fine. Disclosing in a way that's likely to cause harm that could otherwise be minimized with a little care... not so much.

[ Parent | on HN ]