About the security content of Security Update 2018-001

Re:About the security content of Security Update 2018-001 by ehsankia on Tuesday May 01, 2018 @11:55PM (#16973922)

Some high profile exploits they either discovered or played a big role in:

- SHAttered(?)

- Row hammer

- Cloudbleed

- Lastpass exploit

- Meltdown & Spectre

[ Parent | on HN ]

Re:About the security content of Security Update 2018-001 by 0xFFFF0000 on Wednesday May 02, 2018 @01:21AM (#16974260)

Would be good to also highlight the other finders of some of these issues, but this view shows that Google Project Zero is a well executed PR machine taking away the focus of other security researchers. The title of this thread is similarly misleading.

[ Parent | on HN ]

Re:About the security content of Security Update 2018-001 by ehsankia on Wednesday May 09, 2018 @02:52AM (#17027865)

To be clear, I state that "they played a role in", implying that there were other people too.

[ Parent | on HN ]

Re:About the security content of Security Update 2018-001 by y4mi on Wednesday May 02, 2018 @07:10AM (#16975794)

Why a question mark behind SHAttered?

> This result is the product of a long term collaboration between the Cryptology Group at Centrum Wiskunde & Informatica (CWI) - the national research institute for mathematics and computer science in the Netherlands - and the Google Research Security, Privacy and Anti-abuse Group. [...]

[ Parent | on HN ]

Re:About the security content of Security Update 2018-001 by ehsankia on Wednesday May 09, 2018 @02:53AM (#17027871)

I know it was Google, but I wasn't sure if Google Research was the same as Google Project Zero or a different team.

[ Parent | on HN ]