Új hozzászólás Aktív témák

• #14 S_x96x_S őstag

  Új Válasz 2020-06-09 22:46:42 #14

  Új hozzászólás

  Összes hozzászólása itt Válaszok az összes hozzászólására itt Válaszok erre a hozzászólásra

  Privát üzenet küldése

  

  S_x96x_S

  őstag

  azta neki ...
  ez már rekord! " 21-months embargo!? "
  https://www.vusec.net/projects/crosstalk/#faqs

  "What’s with the lengthy 21-months embargo?
  We do not take long embargoes lightly, as we believe a short (ideally 90-day) vulnerability disclosure period is a good balance between giving vendors sufficient time to mitigate a vulnerability and informing the public early. Our original report (Sep 2018) only described same-core (CPUID) leaks and we did not discuss this PoC further with Intel until July 2019, when we reported that we had reproduced cross-core leaks for a number of instructions including RDRAND. Up to that point, we had not investigated thoroughly the implications of the attack (and, apparently, neither had Intel). We recognize the complexity of fixing bugs like this one, but as we made clear in the past, Intel should have fixed the MDS vulnerability – and dealt with our reported PoCs – properly from the outset, rather than play whac-a-mole with its symptoms. "

  Mottó: "A verseny jó!"

Új hozzászólás Aktív témák