undefined | Better HN

0 pointscjbprime8y ago0 comments

Worth noting that in this case, many of the authors are in academia. It wasn't solely a Google project.

0 comments

I read it as it was an independent discovery by project zero and by academia researchers.

Independent discovery don't happen overnight. Intel must have been aware of these vulnerabilities for some time.

edit: I'm sure everyone involved acted responsibly. I'm just curious as how far apart these independent discoveries were made.

The bug has been around forever, but it must have been discovered relatively recently since it's not fixed in hardware yet.

I've always been baffled by the concept of simultaneous discovery.

teraflop8y ago

The Spectre paper includes this line in the acknowledgements:

> We would like to thank Intel for their professional handling of this issue through communicating a clear timeline and connecting all involved researchers.

1 more reply

forgot-my-pw8y ago

Google project zero blog says: We reported this issue to Intel, AMD and ARM on 2017-06-01

rdtsc8y ago

We talked about NSA and how people are leaving for greener pastures. Wondered two things:

1) Have any of them ended up in Project Zero or working on stuff like this

2) Wonder if NSA knew about this vulnerability and now someone there in a windowless office is sighing saying to themselves "Welp, another backdoor we can't use".

j / k navigate · click thread line to collapse