I'm not trying to dismiss this outright, but what is this? Is this a hoax or real? Because from the name of the site to the whitepaper, it all smells rather fishy. I also read on Reddit that they only told AMD 24h before disclosure, even though all of these vulnerabilities are supposed to be "public knowledge" anyway?

> It summarizes security vulnerabilities, but purposefully does not provide a complete description of such vulnerabilities to protect users, such that a person with malicious intent could not actually exploit the vulnerabilities and try to cause harm to any user of the products described herein. Do not attempt to exploit or otherwise take advantage of the security vulnerabilities described in the White Paper.

> The report and all statements contained herein are opinions of CTS and are not statements of fact. To the best of our ability and belief, all information contained herein is accurate and reliable, and has been obtained from public sources we believe to be accurate and reliable. Our opinions are held in good faith, and we have based them upon publicly available facts and evidence collected and analyzed, which we set out in our research report to support our opinions. We conducted research and analysis based on public information in a manner that any person could have done if they had been interested in doing so