Security

6310 readers

7 users here now

Confidentiality Integrity Availability

founded 6 years ago

MODERATORS

AMD Zen 1 through Zen 4 CPUs use an insecure hash function in the signature validation for microcode updates; researchers released a proof of concept update which makes the RDRAND instruction return 4 (github.com)

submitted 10 months ago* (last edited 10 months ago) by cypherpunks@lemmy.ml to c/security@lemmy.ml

0 comments fedilink hide all child comments

for readers missing the significance of the number 4 in the proof of concept: to demonstrate this vulnerability the researchers created a microcode update which replaces the "hardware" random number generator behind the RDRAND instruction with an implementation of xkcd#221 😭

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here