Google researchers uncover critical security flaw in all AMD Zen processors (www.techspot.com)
from floofloof@lemmy.ca to cybersecurity@infosec.pub on 11 Mar 04:05
https://lemmy.ca/post/40447512

#cybersecurity

threaded - newest

cron@feddit.org on 11 Mar 06:08 next collapse

The researchers discovered that AMD had been using a publicly available example key from NIST documentation since Zen 1, which allowed them to forge signatures and deploy arbitrary microcode modifications.

I wish these sorts of errors were not that common.

thebardingreen@lemmy.starlightkel.xyz on 11 Mar 11:33 collapse

The researchers discovered that AMD had been using a publicly available example key from NIST documentation since Zen 1,

lol… sigh…

floofloof@lemmy.ca on 11 Mar 17:12 collapse

Just like all the BIOSes that have turned out to be using keys called things like TEST ONLY - NOT FOR PRODUCTION, rendering Secure Boot not. I have a couple of computers like this.