Conversation

Notices

1. Shawn Webb (lattera@bsd.network)'s status on Thursday, 18-Jan-2018 02:28:25 UTC Shawn Webb

   Yet another branded and embargoed vulnerability that leaves tons of people out in the cold without protection.

   I wonder who the favorite vendors getting notified this round is. I guess whomever paid the researcher the most?

   At this point, I'm going to consider embargoes as yet another form of extortion.

   https://skyfallattack.com/

   • Hallå Kitteh repeated this.
   • Shawn Webb (lattera@bsd.network)'s status on Thursday, 18-Jan-2018 02:33:53 UTC Shawn Webb

     • Iris, in: Panic! At the kernel

     @Cybertrash Linux, Amazon, and Google got a six-month head start on Meltdown and Spectre. The whole rest of the world got no advanced notification. (Well, FreeBSD got 11 days.)

     Hallå Kitteh repeated this.
   • Hallå Kitteh (clacke@social.heldscal.la)'s status on Thursday, 18-Jan-2018 03:24:05 UTC Hallå Kitteh

     • Iris, in: Panic! At the kernel
     @lattera @cybertrash
     
     > Full details are still under embargo and will be published soon when chip manufacturers and Operating System vendors have prepared patches.
     
     Zerodays have become -10 days and now come with teaser trailers.
     
     We'll be back with your latest gaping security hole after these messages.