Nvidia's Hackers Have Weirdly Relatable Demands

Nvidia's Hackers Have Weirdly Relatable Demands

Tech News cybersecurity gpu hacking nvidia

So this is a weird one. Nvidia — yes, the GPU company, the one that makes the cards approximately zero of us could actually buy at MSRP for the last year and a half — got hacked. Confirmed it themselves on the 23rd, said they were "investigating an incident" that hit some of their internal IT systems. Corporate-speak for "someone got in."

Since then it's come out that a group calling itself Lapsus$ is claiming credit, and they say they pulled something like a terabyte of internal data, including employee credentials and chunks of source code, reportedly touching stuff related to DLSS (that's the upscaling tech that makes your framerate look better than your hardware deserves). Nvidia hasn't confirmed the full scope, understandably, but they haven't really denied it either.

Here's the part that made me actually laugh out loud at my desk though. The demands being reported aren't money. Or not only money. From what's floating around, the hackers are asking Nvidia to do two things: remove the LHR limiter from RTX 30-series cards, and open-source their GPU drivers by September. LHR is the "Lite Hash Rate" thing Nvidia baked into newer cards specifically to make them worse at mining crypto, so miners would stop buying up the entire consumer stock. If Nvidia doesn't comply, apparently more data gets leaked.

I don't know what to do with a ransom note that reads like a post from r/nvidia. It's almost sincere. Somewhere in this hacking crew is a guy who's just really mad he couldn't get a 3080.

And look, I get it, honestly. I've been trying to buy a 3070 since basically the day it existed. Every restock I've caught has been through some third-party queue system that dumps you into a waiting room with four thousand other people, and by the time you get through, it's gone, or it's $850 on eBay from somebody who clearly bought six of them with a bot. I priced out a prebuilt PC in January just to get around the whole mess and even that felt like paying a tax for not owning a scalping script myself. It's been a genuinely bad two years to want a new graphics card, and I say that as someone who is otherwise not much of a complainer about hardware prices.

So there's something almost funny about a criminal hacking group's list of demands overlapping so cleanly with a Reddit thread's list of grievances. Open source the drivers, kill the mining lock, basically "make the GPU market less annoying for enthusiasts," except with a terabyte of stolen source code as leverage instead of an upvote button.

Whether any of this actually gets Nvidia to budge, I doubt it. Companies don't generally negotiate driver architecture with extortionists, and honestly they shouldn't: that's a terrible precedent regardless of how sympathetic the ask sounds. But it is a genuinely strange moment where the thing criminals are threatening to do unless a corporation caves happens to be a thing a lot of ordinary customers have wanted for unrelated, non-criminal reasons for a while now. LHR has been controversial since it shipped. People hate that it's there, miners hate that it works, and enthusiasts who just want a card for actual gaming have been stuck in the middle watching prices stay stupid regardless.

There's also the source code angle, which is the more serious part of this even if it's less quotable. If DLSS-related code is genuinely out there, that's the kind of thing that matters for years, not weeks (reverse engineering, competitive stuff, who knows). Nvidia's statement so far has been the standard "we don't believe this impacts our ability to serve customers" line, which is the exact sentence every company says right before it turns out to have impacted their ability to serve customers.

I'll believe the driver stuff is real leverage when I see it actually forcing a decision. Until then it's just the most relatable extortion attempt I've read about in a while, and a reminder that even people doing something clearly wrong can have a list of complaints that's basically just... correct. Doesn't make it okay. Does make it interesting.

Anyway. Still don't have a new GPU. Still refreshing the Best Buy page out of habit at this point, the way you'd check your phone even when you know nothing's there.