News for hackers. Stuff that matters.

A comment on Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hours Prior Notice. Parent comment

Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by guelo on Tuesday March 13, 2018 @09:28PM (#16581506)
They're weaponizable when using a small and rapidly shrinking percentage of unpatched browsers running JavaScript delivered by extremely uncommon websites.
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by tptacek on Tuesday March 13, 2018 @09:36PM (#16581542)
That's true because the vulnerability itself wasn't overblown, and was immediately patched.
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by yuhong on Tuesday March 13, 2018 @09:58PM (#16581651)
I am particularly talking about things like Intel's stock price though
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by tptacek on Tuesday March 13, 2018 @10:32PM (#16581831)
Oh. Sure, I buy that. I don't believe patchable vulnerabilities really exert major pressure on stock prices.
[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by Buge on Wednesday March 14, 2018 @04:17AM (#16583151)
>JavaScript delivered by extremely uncommon websites

All it takes it emailing them a slightly convincing link, and they're running javascript from one of those "extremely uncommon websites". It doesn't matter how common the website it, a single website can compromise millions of users.

[ Parent | on HN ]
Re:Security Researchers Publish Ryzen Flaws, Gave AMD 24 Hou... by api on Tuesday March 13, 2018 @11:36PM (#16582075)
Attacks only get better.
[ Parent | on HN ]