News for hackers. Stuff that matters.

A comment on About the security content of Security Update 2018-001.

Re:About the security content of Security Update 2018-001 by CognitiveLens on Tuesday May 01, 2018 @11:25PM (#16973808)
For anyone unfamiliar with Project Zero, it's a team at Google dedicated to finding security vulnerabilities across the internet (and in software in general, it seems)

https://security.googleblog.com/2014/07/announcing-project-z...

[ Parent | on HN ]
Re:About the security content of Security Update 2018-001 by ehsankia on Tuesday May 01, 2018 @11:55PM (#16973922)
Some high profile exploits they either discovered or played a big role in:

- SHAttered(?)

- Row hammer

- Cloudbleed

- Lastpass exploit

- Meltdown & Spectre

[ Parent | on HN ]
Re:About the security content of Security Update 2018-001 by 0xFFFF0000 on Wednesday May 02, 2018 @01:21AM (#16974260)
Would be good to also highlight the other finders of some of these issues, but this view shows that Google Project Zero is a well executed PR machine taking away the focus of other security researchers. The title of this thread is similarly misleading.
[ Parent | on HN ]
Re:About the security content of Security Update 2018-001 by ehsankia on Wednesday May 09, 2018 @02:52AM (#17027865)
To be clear, I state that "they played a role in", implying that there were other people too.
[ Parent | on HN ]
Re:About the security content of Security Update 2018-001 by y4mi on Wednesday May 02, 2018 @07:10AM (#16975794)
Why a question mark behind SHAttered?

> This result is the product of a long term collaboration between the Cryptology Group at Centrum Wiskunde & Informatica (CWI) - the national research institute for mathematics and computer science in the Netherlands - and the Google Research Security, Privacy and Anti-abuse Group. [...]

[ Parent | on HN ]
Re:About the security content of Security Update 2018-001 by ehsankia on Wednesday May 09, 2018 @02:53AM (#17027871)
I know it was Google, but I wasn't sure if Google Research was the same as Google Project Zero or a different team.
[ Parent | on HN ]