AMD has confirmed the theft of graphics IP and it seems likely to be related to Microsoft’s Xbox Series X. The announcement alone doesn’t provide much information, but when taking with other reports, the picture becomes a little clearer.
The Xbox Series X is Microsoft’s big next-gen gaming bet and many have already been keen to see how it will compare to the PlayStation 5. While it is still not entirely confirmed what exactly is powering the Xbox Series X, the general understanding is the games console likely draws on AMD’s “Arden'' processor. The source code for that processor now appears to have been included in the recent theft. That is, according to the hacker claiming to have stolen the code.
In a recent announcement, AMD confirmed the theft of some of its graphics intellectual property. The company did not go into detail on what exactly was stolen, but did state that some of the files were posted online, that they were taken down, and that they only represent some of the files that were stolen. However, a recent report from TorrentFreak looks to fill in many of the gaps after having reportedly been in contact with the hacker. According to the report, the source code was obtained from a hacked computer and the haul includes code for the Navi 10, Navi 21, as well as the Arden GPU. The hacker has valued the lot at $100 million and is currently looking for a buyer. Furthermore, if a buyer is not found, the hacker says they’ll release all of the code to the public. Some of the data had already been made available via Github, although AMD utilized DMCA notices to have the information taken down - which is likely what AMD is referring to in its announcement.
What The AMD Code Theft Means
Right now, it remains to be seen how impacting the theft is, or will be, and especially considering firm details on what exactly was stolen remains unknown. In AMD’s announcement, the company says that the files are “not core to the competitiveness or security of our graphics products.” While adding that it is currently working with law enforcement to resolve the issue. If AMD is correct, then there presumably will be minimal impact on devices that utilize any of these GPUs, including the Xbox Series X. Of course, this is based on what AMD has said and it could be the case that the data haul is far more revealing than what the company wants people to know about, especially if the hacker is attempting to sell the code in the meantime.
Either way, it doesn’t paint a great picture for AMD's security in general. Not only is any security or data breach concerning, but this one does not come across as a particularly complicated hacking attempt. For example, the hacker explains the code was taken from an unprotected computer and server, with the files lacking any adequate protection or encryption. One might expect that a company like AMD would have better security procedures and processes in place than what's been suggested and certainly when it comes to solutions included in high profile devices, such as the Xbox Series X.
Source: TorrentFreak