846
AMD denies researcher a $10,000 bug bounty after fixing critical auto-updater vulnerability — security flaw took 124 days to patch (www.tomshardware.com)
submitted 4 months ago by to c/technology@lemmy.world
92 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 4 months ago (2 children)

If anyone could provide an AMD email to ask for a statement concerning this issue, that would be nice.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 9 points 4 months ago (1 child)

    I don't think a statement is really needed here, this wasn't a vulnerability, the code was never called. Even if the code were called, the $10,000 bounty is for a different type of bug entirely too

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 4 months ago*

    so stacking vulnerabilities is a thing

    if the code exists it can be called

    this is a valid bug and it’s silly to rule lawyer something like this

    so good job amd, you are ‘actually’ right,

    this totally won’t cost you in the long run at all

    god damn do lawyers and business majors need to stop making tech decisions

  • permalink
  • fedilink
  • source
  • parent