Spyke

Replies

Comment on

AMD changes rules, denies researcher $10,000 bounty after taking 124 days to patch security flaw

Reply in thread

Except when he responsibly disclosed to AMD, they closed the ticket as "out of scope" without any further communication. He then made a blog post about it warning other users about the vulnerability since ostensibly, AMD didn't want to fix it. Only after that post had gone viral AMD suddenly came back saying that despite the ticket being closed as such, their internal security team was still analysing it and he should've somehow known that and that he violated the TOC of the bug bounty program (remember, after saying that the vulnerability was out of scope of the program). Additionally AMD then changes those terms a month after the initial ticket to suddenly say that even if the ticket is refused, you're still not allowed to talk about it. Then to top it off they take a month longer to fix it then is industry standard, don't disclose the fix to the researcher as is customary until a few days before release and only because he kept badgering them and as the cherry don't tell their users that the only way to securely fix this is by uninstalling and reinstalling. Everything about it is scummy behaviour all around.

Comment on

Republicans have ‘nothing to run on’ in midterms after Trump failures, Jeffries says

Reply in thread

Indeed and the DNC bend over backwards to make sure they get as little visibility as possible. Instead of learning from the success of "socialist" candidates - which really are barely left of center by European norms - they persist in trying to chase this mythical idea of the American centrist... So instead of trying to appeal to the left with actual policy, they try to pander to moderate republicans

memes

Comment on

Say it ain't so

Reply in thread

I run a small variant of Arno's engram on my Kyria v3 and I can heartily recommend it. After a few weeks adjustment period this feels way more natural to type on