News for hackers. Stuff that matters.

A comment on Side channel that leaked data from Intel CPUs patched by silent Windows update. Parent comment

Re:Side channel that leaked data from Intel CPUs patched by ... by iamnotacrook on Wednesday August 07, 2019 @08:40AM (#20634122)
"2010...Windows... became near unassailable fortresses"

Did anyone read this and not laugh out loud?

"These hardware bugs turn that idea on its head, suddenly the whole ghost in the shell hacker style dream is again a possibility"

No, it was always a possibility.

[ Parent | on HN ]
Re:Side channel that leaked data from Intel CPUs patched by ... by imglorp on Wednesday August 07, 2019 @09:19AM (#20634419)
Something interesting did happen around that time. Looking at all CVEs as an aggregate, it appears 2008ish is about when there was an inflection, perhaps a shift from OS to injection/validation/appsec?

https://nvd.nist.gov/general/visualizations/vulnerability-vi...

[ Parent | on HN ]
Re:Side channel that leaked data from Intel CPUs patched by ... by novaleaf on Wednesday August 07, 2019 @12:25PM (#20636193)
I left msft in 2007 and at that time they were in full "security is important" mode. Due to backcompat it's of course hard (impossible?) to remove local exploits, but RCE is a lot harder. For example I don't know the last time I heard about a windows RCE. Edge/IE sure, but not windows. Windows Defender is a very good security product, and Windows Update "just works".
[ Parent | on HN ]