Quis renovatores renovat — who updates the updater?
These mofos are about to see why bug bounties exist in the first place
I’m sure there’s absolutely nothing that could go wrong with getting on the bad side of security researchers.
Sounds like everyone should stop reporting vulnerabilities and start selling them 🤷♂️ great work, AMD, there’s absolutely no way this relatively small “cost saving” backfires!
Sounds like AMD needs to be Nightmare Eclipsed.
Haha, oh boy, between AMD and MS, I predict some zero-days in the near future from people like Paul (the researcher here) just selling the exploit.
As they should, it’s the only reasonable response to how these companies act.
Uhh wont that discourage zero day reports?
Worse. It encourages selling them to the black market instead.
The illicit market for newly discovered security vulnerabilities generally pays pretty well, especially if you can demonstrate implementation. The only reason it’s not a much bigger problem is that most security researchers have some moral compunctions and the professional desire to fix problems, not proliferate them.
If the companies basically tell the security researchers to pound sand, that encourages making a living elsewhere.
These days there’s so much slop in the world that 0day reports end up being worthless. The idea is sound, but far too many people are abusing the system and so they’re not worth having anymore.
The report is only because there’s a 0-day sploit. It’s not like some cogsucker can make it up and get paid.
Okay so we’ll have to have a neutral third-party confirm them, but really that will have to happen now anyway since no one will trust AMD to pay their promises.
if you say so. meanwhile, for anyone who finds them and doesn’t have any morals, the US government will pay you up to a few million dollars depending on how valuable the zero-day is.
He would have got a lot more than $10,000 on the dark web.
I expect 10k is nothing compared to one of their salaries. I would expect zero days are worth at least an entire salary.
That’s sad. I wish AMD would not have done that 😔
AMD also donated to the orange pedo, coz it’s good for business.
🤬😡
They HAVE to do that, it’s a “business” not a voter. Oops, did I say that out loud?
