TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

AMD Catalyst driver update vulnerability

24 点作者 BruceM大约 12 年前

7 条评论

aluhut大约 12 年前
The Graphic Drivers for AMD/ATI were always the main reason why I did buy NVIDIA. As long as I can think back, there have always been problems with those drivers.<p>I didn't have any of their cards for a decade until I got an old company Dell and hooked it up to the TV. From time to time it forgets that there IS sound coming through the HDMI cable. I googled around. Seems to be a common problem for several versions already. It seemed to have been fixed for some people. Some...<p>I can't understand how you can allow such things as a big company today.
评论 #5393492 未加载
nbpoole大约 12 年前
This is an (unfortunately) fairly common class of vulnerability. Many applications fall victim to this form of attack because they don't think to check signatures on binaries. There is a tool, EvilGrade (<a href="https://code.google.com/p/isr-evilgrade/" rel="nofollow">https://code.google.com/p/isr-evilgrade/</a>), designed to assist in demonstrating these types of attacks.
Hello71大约 12 年前
<a href="http://support.amd.com/us/kbarticles/Pages/AMDauto-updatenotification.aspx" rel="nofollow">http://support.amd.com/us/kbarticles/Pages/AMDauto-updatenot...</a><p>&#62; Due to a minor security vulnerability in the auto-update notification<p>Palm, meet face.
评论 #5390473 未加载
评论 #5390026 未加载
whichdan大约 12 年前
The whole Catalyst driver update process is really shitty, anyway. Several steps for what should essentially be automatic.
评论 #5390051 未加载
评论 #5390263 未加载
Xanza大约 12 年前
Always nice to know that the drivers that already render my $200 graphics card completely useless also come neatly packaged with a venerability.
Glyptodon大约 12 年前
Update: I take it the automatic update feature was a Windows only thing?<p>I've had machines using FGLRX off and on for years and never realized it had this feature. Guess that's a good thing, though, considering it evidently was never well implemented. It also seems like bad idea as you might lose compatibility between whichever specific driver/kernel pair if you aren't careful.<p>But I take exception to those who claim the Catalyst install process is horrendous. I think AMD's process of<p>./&#60;installerName&#62; --buildpkg &#60;distro/version&#62;<p>followed by:<p>&#60;package manager install command (for example, dpkg -i)&#62; &#60;generated package name&#62;<p>and tying in to the DKMS subsystem is much more convenient than Nvidia's approach which directly patches itself into your kernel in a way that would force you to manually reinstall it after every kernel update (unless you were using a distro packaged version, obviously). Maybe they've changed that? (Right now I'm using the distro-packaged driver on my nVidia system.)<p>While I'm not happy with the current AMD Linux driver mostly because it lacks video decode/render accel as nice as VDPAU, I think most of the other frequent complaints about the driver tend to be a little unfair considering how you can often have obnoxious problems with the nVidia binary as well. With things like HDMI it's been my experience that both drivers tend to have some eccentricities, for example.
miahi大约 12 年前
Also, you cannot disable the automatic update in the Catalyst Control Center. Uncheck the Auto Update box, click Apply - the box is checked again.