TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

AMD Catalyst driver update vulnerability

24 pointsby BruceMabout 12 years ago

7 comments

aluhutabout 12 years ago
The Graphic Drivers for AMD/ATI were always the main reason why I did buy NVIDIA. As long as I can think back, there have always been problems with those drivers.<p>I didn't have any of their cards for a decade until I got an old company Dell and hooked it up to the TV. From time to time it forgets that there IS sound coming through the HDMI cable. I googled around. Seems to be a common problem for several versions already. It seemed to have been fixed for some people. Some...<p>I can't understand how you can allow such things as a big company today.
评论 #5393492 未加载
nbpooleabout 12 years ago
This is an (unfortunately) fairly common class of vulnerability. Many applications fall victim to this form of attack because they don't think to check signatures on binaries. There is a tool, EvilGrade (<a href="https://code.google.com/p/isr-evilgrade/" rel="nofollow">https://code.google.com/p/isr-evilgrade/</a>), designed to assist in demonstrating these types of attacks.
Hello71about 12 years ago
<a href="http://support.amd.com/us/kbarticles/Pages/AMDauto-updatenotification.aspx" rel="nofollow">http://support.amd.com/us/kbarticles/Pages/AMDauto-updatenot...</a><p>&#62; Due to a minor security vulnerability in the auto-update notification<p>Palm, meet face.
评论 #5390473 未加载
评论 #5390026 未加载
whichdanabout 12 years ago
The whole Catalyst driver update process is really shitty, anyway. Several steps for what should essentially be automatic.
评论 #5390051 未加载
评论 #5390263 未加载
Xanzaabout 12 years ago
Always nice to know that the drivers that already render my $200 graphics card completely useless also come neatly packaged with a venerability.
Glyptodonabout 12 years ago
Update: I take it the automatic update feature was a Windows only thing?<p>I've had machines using FGLRX off and on for years and never realized it had this feature. Guess that's a good thing, though, considering it evidently was never well implemented. It also seems like bad idea as you might lose compatibility between whichever specific driver/kernel pair if you aren't careful.<p>But I take exception to those who claim the Catalyst install process is horrendous. I think AMD's process of<p>./&#60;installerName&#62; --buildpkg &#60;distro/version&#62;<p>followed by:<p>&#60;package manager install command (for example, dpkg -i)&#62; &#60;generated package name&#62;<p>and tying in to the DKMS subsystem is much more convenient than Nvidia's approach which directly patches itself into your kernel in a way that would force you to manually reinstall it after every kernel update (unless you were using a distro packaged version, obviously). Maybe they've changed that? (Right now I'm using the distro-packaged driver on my nVidia system.)<p>While I'm not happy with the current AMD Linux driver mostly because it lacks video decode/render accel as nice as VDPAU, I think most of the other frequent complaints about the driver tend to be a little unfair considering how you can often have obnoxious problems with the nVidia binary as well. With things like HDMI it's been my experience that both drivers tend to have some eccentricities, for example.
miahiabout 12 years ago
Also, you cannot disable the automatic update in the Catalyst Control Center. Uncheck the Auto Update box, click Apply - the box is checked again.