AMD's random number generator can't generate a 0?
Summary
The article highlights a potential flaw in AMD's random number generator that prevents it from generating the value 0, raising concerns about randomness and security implications.
Similar Articles
AMD Stiffs Researcher $10k Bug Bounty
AMD denied a $10,000 bug bounty to researcher Paul LaRosa after he discovered a critical HTTP vulnerability in AMD's Windows auto-updater, allowing man-in-the-middle attacks; the company took 124 days to fix the issue and still uses weak CRC32 checksums.
How hackers reverse Math.random()
This article demonstrates how to reverse common pseudo-random number generators (such as linear congruential generators, XOR shift, and Flash's RNG), and shows a practical attack by predicting mine positions in a Minesweeper game, emphasizing that ordinary random numbers should not be used in security contexts.
What is random generation?
An exploration of pseudo-random number generation in computers, focusing on linear congruential generators (LCGs) and their quality visualization. The article also touches on entropy sources like Cloudflare's lava lamps and serves as a precursor to property-based testing.
The RCE that AMD wouldn't fix
A researcher discovered a remote code execution vulnerability in AMD's AutoUpdate software due to insecure HTTP download links and lack of certificate validation. AMD initially dismissed it as out of scope but later agreed to issue a CVE and fix after public attention.
Users cry foul after AMD stripped memory crypto from its consumer CPUs
AMD removed Transparent Secure Memory Encryption (TSME) from its consumer Ryzen CPUs without notice, causing user backlash. The change was detected through firmware updates and appears to be a deliberate restriction to differentiate Pro chips.