Categories
Vuln disclosure

The art of disclosing vulnerabilities

An Israeli security firm claimed to have discovered multiple vulnerabilities inside some AMD’s processors. It could be another ordinary security advisory, but it is not. There is an interesting point in this case: the lack of a coordinated release. Responsible vs Coordinated.

Categories
Vuln disclosure

Please continue naming vulnerabilities

Two weeks ago, someone created a website that announced two potential new attacks dubbed Skyfall and Solace. A few days later, the creator of the site revealed that it was a hoax and relaunched the old debate about naming vulnerabilities. Is branding good or bad for security industry?