AMD chipset flaw can leak passwords

[Hanno Labuschagne]

AMD chipset flaw can leak passwords

Chip manufacturer AMD has shared more details on a chipset driver vulnerability that allowed non-admin computer users to download passwords and carry out other attacks.

The issue affects a wide range of AMD processors, including all Ryzen desktop and mobile processors.

ZeroPeril co-founder and security researcher Kyriakos Economou discovered and reported the flaw to AMD in a coordinated disclosure.

 

[Vorastra]

This was known 3 weeks ago already when those drivers, and some articles, were released.
Why only "official" public disclosure now?

 

[Swa]

So another of those no risk for home users flaws. Man, the media is really milking these things.

 

[Arthur]

This was known 3 weeks ago already when those drivers, and some articles, were released.
Why only "official" public disclosure now?

Because it's both prudent and good practice to quietly let manufacturers, vendors, distributors and suppliers know early on, so they can put in place various mitigation measures and be prepared when the news breaks publicly.

 

[Fulcrum29]

The more the popular your product, the more it will be under the microscope. Just ask Intel.

This is good,

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1009

no drama needed. There will always be zero-days.

 

[Vorastra]

Because it's both prudent and good practice to quietly let manufacturers, vendors, distributors and suppliers know early on, so they can put in place various mitigation measures and be prepared when the news breaks publicly.

Yet AMD had already put out drivers and a statement 3 weeks prior...?

 

[Mystic Twilight]

This was known 3 weeks ago already when those drivers, and some articles, were released.
Why only "official" public disclosure now?

The previous release mistakenly only specified older processors being vulnerable like the 1000 series, the release has been updated to specify a wider range and with more recent processors.

 

[_TrXtR_]

AMD chipset flaw can leak passwords

Chip manufacturer AMD has shared more details on a chipset driver vulnerability that allowed non-admin computer users to download passwords and carry out other attacks.

The issue affects a wide range of AMD processors, including all Ryzen desktop and mobile processors.

ZeroPeril co-founder and security researcher Kyriakos Economou discovered and reported the flaw to AMD in a coordinated disclosure.

update now!!!!​

why?