Re: [coreboot] anybody know more about https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00160.html

[ron minnich]

yes, I do know that much, I was hoping for some of the actual technical
detail that is left out, particularly the password issues on the BMC.

On Thu, Jul 12, 2018 at 5:21 AM R S  wrote:
> This advisory is one of the 10 released vulnerabilities published by Intel
> June 10th[1][2]. One of them is called Spectre v1.1 (Paper:
> https://people.csail.mit.edu/vlk/spectre11.pdf ). At least 2 of the 10
> vulnerabilities seem to be part of Intel's Bug Bounty Program, one of them
> worth $100k[3].
>
> [1] https://www.intel.com/content/www/us/en/security-center/default.html
> [2] https://01.org/security/advisories/intel-oss-10002
> [3]
> https://hackerone.com/intel/hacktivity?sort_type=latest_disclosable_activity...
>
> On Wed, Jul 11, 2018 at 4:57 PM, ron minnich  wrote:
> > just wondering.