Skip Navigation

cybersecurity @infosec.pub

floofloof @lemmy.ca

4mo ago

Google researchers uncover critical security flaw in all AMD Zen processors

www.techspot.com

Attention Required! | Cloudflare

Technology @lemmy.world

floofloof @lemmy.ca

4mo ago

Google researchers uncover critical security flaw in all AMD Zen processors

www.techspot.com /news/107074-google-researchers-uncover-critical-security-flaw-amd-zen.html

3 comments

The researchers discovered that AMD had been using a publicly available example key from NIST documentation since Zen 1, which allowed them to forge signatures and deploy arbitrary microcode modifications.
I wish these sorts of errors were not that common.
The researchers discovered that AMD had been using a publicly available example key from NIST documentation since Zen 1,
lol... sigh...
- Just like all the BIOSes that have turned out to be using keys called things like TEST ONLY - NOT FOR PRODUCTION, rendering Secure Boot not. I have a couple of computers like this.