CTS Labs Criticized For Dubious Report, Unconventional Reporting on AMD Flaws

Picayune-known Israeli tech business firm CTS Labs recently detailed thirteen critical security vulnerabilities and manufacturer backdoors in AMD's EPYC, Ryzen, Ryzen Pro and Ryzen Mobile lines of CPU chips. As expected, the written report created quite a stir amid cyber-security analysts and industry watchers, not the least considering the revelations come and so shortly later the huge controversy surrounding the Meltdown and Spectre security flaws.

While well-nigh security experts are of the opinion that the flaws are 'real' and have been accurately described in CTS' whitepaper, many have been expressing their shock and utmost discomfiture at the fact that the visitor went against convention and published the details just one twenty-four hours after disclosing them to AMD, barely giving the company a chance to issue security patches.

Now, outspoken tech guru and the creator of the Linux kernel, Linus Torvalds, is taking the atomic number 82 in flaying the Tel Aviv-based cyber-security startup, calling their security advisory "garbage", and saying that "it looks similar the Information technology security earth has hitting a new depression". And that'southward just the showtime of a rather scathing criticism, often tinged with colorful language that Torvalds is well-known for. Co-ordinate to him, "I thought the whole industry was corrupt before, only it'south getting ridiculous".

While he could have expressed himself in a slightly less abrasive tone, Torvalds may accept a bespeak, given that like views have been expressed by many experts from around the world. According to their statement, the fact that would-exist hackers volition need physical admission to devices with these 'vulnerable' CPUs and then proceeds administrative rights to found their malware, means that the PCs will have been already compromised much before getting to the malware phase.

Some other matter that many of them were already pointing out was the rather off-primal disclosure from CTS that the visitor "may have, either directly or indirectly, an economic involvement in the operation of the securities of the companies whose products are the field of study of our reports". Now, Torvalds says he also believes that to be example, saying that the whole thing "looks more like stock manipulation than a security advisory to me".

Source: https://beebom.com/linus-torvalds-cts-labs-garbage-amd-flaws/

Posted by: beaudinspeausell.blogspot.com

Share this post