by Simha Sethumadhavan on May 31, 2017 | Tags: Architecture, Hardware, Policy, Security
What should governments do when they discover a hardware 0-day? In the US, as a matter of policy, any vulnerability that is deemed to affect critical infrastructure is disclosed to the vendors by the government [VEP]. The government can hide vulnerabilities (and...
Read more...
by Simha Sethumadhavan on May 25, 2017 | Tags: Architecture, Hardware, Policy, Security
[Editor’s Note: This post is the first in a series of micro-blogs over four consecutive days.] 0-day security exploits are attacks that use vulnerabilities that are unknown to a vendor. They are referred to as 0-days because the vendor knows about them for zero...
Read more...