Today AMD made a statement corroborating a story that source code relating to AMD’s Navi and Arden GPUs (AMD RNDA 2 architecture) which is going to be in the new Xbox Series X console to be released later this year was stolen by hackers. Hackers seem to be on the list of essential employees while they remained busy after the theft posting the information on Github however AMD said they were only test files to a subset and it was not serious in the statement below. Torrent Freak who is in contact with the hacker claiming responsibility for the leak is informing them that if they don’t get a buyer for the remainder of the code, they will dump the “whole lot” online.
“At AMD, data security and the protection of our intellectual property are a priority. In December 2019, we were contacted by someone who claimed to have test files related to a subset of our current and future graphics products, some of which were recently posted online, but have since been taken down.”
“While we are aware the perpetrator has additional files that have not been made public, we believe the stolen graphics IP is not core to the competitiveness or security of our graphics products. We are not aware of the perpetrator possessing any other AMD IP. We are working closely with law enforcement officials and other experts as a part of an ongoing criminal investigation.”
AMD since then has filed at least 2 DCMA requests that their intellectual property be taken down from Github, the Microsoft subsidiary has cooperated with the requests and everything was removed from the repositories. The DMCA notices sent to Github identified a repository called ‘xxXsoullessXxx’ and a project titled “AMD-navi-GPU-HARDWARE-SOURCE as seen in the text below.
Please describe the nature of your copyright ownership or authorization to act on the owner’s behalf.
This repository contains intellectual property owned by and stolen from AMD.
Please provide a detailed description of the original copyrighted work that has allegedly been infringed. If possible, include a URL to where it is posted online.
The original IP is held privately and was stolen from AMD.
What files should be taken down? Please provide URLs for each file, or if the entire repository, the repository’s URL.
Have you searched for any forks of the allegedly infringing files or repositories? Each fork is a distinct repository and must be identified separately if you believe it is infringing and wish to have it taken down.
No other forks have been discovered.
Is the work licensed under an open source license? If so, which open source license? Are the allegedly infringing files being used under the open source license, or are they in violation of the license?
What would be the best solution for the alleged infringement? Are there specific changes the other person can make other than removal? Can the repository be made private?
This repository is IP stolen from AMD. The only acceptable solution is that the entire repository be removed.
The claimed hacker told Torrent Freak that she valued the source code at $100m but how that calculation was arrived at is unknown. “If I get no buyer, I will just leak everything,” the leaker concluded, adding that the files would be secured with passwords that will only be handed out to select individuals.
Who knows if the hacker really does have valuable information or not? We do know however that AMD is in a whole lot of trouble if they can’t get their security in order before the release of the next-gen consoles.