bewildebeest

Yeah, my thoughts exactly. Do Intel's quoted guidelines mean exploits that expose credentials aren't eligible for a payout? Those are some of the most dangerous!

Intel's handling of this disclosure disgusts me. I think I would become the Joker if I went through the trouble of responsibly disclosing several glaring issues like this, only to be met with complete silence while a fix is quietly pushed in the background.