Slashdot Mirror

Read about the architecture of the vulnerability. It's a hidden rootkit. You can't checksum it, or really even probe it: https://amdflaws.com/#TABLE-vu...

It would be good to read about the problem to understand to have a context to the answer: https://amdflaws.com/#TABLE-vu...

They literally spell it out on their disclaimer page.

Although we have a good faith belief in our analysis and believe it to be objective and unbiased, you are advised that we may have, either directly or indirectly, an economic interest in the performance of the securities of the companies whose products are the subject of our reports.

So while these exploits might be real, they just straight up fess to being shady as shit. This is some blackballing level of unethical behavior. They literally hit and run AMD for profit. Whoever these engineers are, this whole episode should be the end of any future career they might have had and it just stops short of what I would think would constitute an outright FTC investigation.

Twenty-four hour notice and then posting publicly the exploits isn't research, that's a willful attack.

The exploits are reported as serious by a few independent researchers who seem to have been given extra info, but do require that you have *already* powned the target.

And, somehow a short-seller named Viceroy saw fit to put out a report advising people to short AMD stock because they claimed to believe that this flaw would drive AMD to bankruptcy!

Definitely a money grab by CTS Labs. (I'll make a guess that Viceroy are dupes and are not intentionally doing something worth a visit from the SEC...)

They literally spell it out on their disclaimer page.

Although we have a good faith belief in our analysis and believe it to be objective and unbiased, you are advised that we may have, either directly or indirectly, an economic interest in the performance of the securities of the companies whose products are the subject of our reports.

So while these exploits might be real, they just straight up fess to being shady as shit. This is some blackballing level of unethical behavior. They literally hit and run AMD for profit. Whoever these engineers are, this whole episode should be the end of any future career they might have had and it just stops short of what I would think would constitute an outright FTC investigation.

Twenty-four hour notice and then posting publicly the exploits isn't research, that's a willful attack.

https://amdflaws.com/disclaime...

"Although we have a good faith belief in our analysis and believe it to be objective and unbiased, you are advised that we may have, either directly or indirectly, an economic interest in the performance of the securities of the companies whose products are the subject of our reports."

24 hours notice. "Researchers" who seem to spring up out of nowhere. Creating a website and videos for maximum publicity. All the security flaws seem overblown (require actual flashing of firmware or bypassing driver signing), and.. wait, what's this?

https://www.reddit.com/r/AMD_S...

A huge number of put option (a bet that share price will fall dramatically) volume 5 days ago?

Nah, this is totally legit!

https://amdflaws.com/ for the actual exploits detailed. the "whitepaper" is mostly fluff, unless you enjoy pretty icons and charts..completely remiss of any technical implementation details outside of how vulnerable Windows is to this flaw. Idiotic green screen video confirms this exploit appears to have more studio production value than actual security value. https://www.youtube.com/watch?...