News for hackers. Stuff that matters.
Re:AMD: Microcode Signature Verification Vulnerability by wahern on Monday February 03, 2025 @03:12PM (#42922335)
For organizations like the NSA, a simple hack like this is the opposite of ham-fisted, though presumably they'd try to ensure the output would pass common statistical tests. The utility in quietly breaking cryptographic protocols is presumably a major reason why it was chosen for the proof-of-concept.
Re:AMD: Microcode Signature Verification Vulnerability by rincebrain on Monday February 03, 2025 @03:16PM (#42922414)
Sure, but that was my point, was that just overriding rdrand would be much more ham-fisted than any practical attack I would expect someone to weaponize this into outside of a PoC.