Wednesday, December 19th 2012
AMD to Get Rid of Catalyst Auto-Update Feature in 2013, Cites Security Concerns
It looks like somebody found a security vulnerability in the auto-update feature of AMD Catalyst Control Center (CCC), which notifies you of updates to Catalyst system software and directs you to the download page. AMD announced that it plans to discontinue the feature starting in 2013, and recommends that you get your driver updates the old-fashioned way: by keeping up with the news and getting your drivers from the internet. Due to the severity of the exploit, AMD recommended users to disable auto-updates in their current CCC configuration, or click on "skip" whenever it prompts you to update drivers. AMD stated:
AMD will be removing the auto-update notification functionality from versions of AMD Catalyst Control Center running under Windows Vista, Windows 7 and Windows 8, beginning in early 2013. Due to a minor security vulnerability in the auto-update notification, users are recommended to update to the latest AMD Catalyst driver release from the amd.com web site. Alternatively, users should (i) uncheck the "Automatically check for updates" option under AMD Catalyst Control Center > Information > Software Update, and (ii) choose to "Skip" notifications from the AMD Catalyst driver, which notifications recommend updating to the latest driver.
33 Comments on AMD to Get Rid of Catalyst Auto-Update Feature in 2013, Cites Security Concerns
I don't use auto-update for my cards, but sometimes I see SLI profiles being installed automatically, good convenience to have.
I always use Custom Installation, which allows removal of what you don't want installed, plus if by some chance it persists and installs just go to add remove program and uninstall it.
AMD update is all like "ALL YOUR BASE ARE BELONG TO US" and bombs your rig with trojans.
My guess is that the vulnerability in AMDs system allows someone to make the system alert the user there is an update and points them to a fraudulent site to download the "update" but that "update" could be anything, likely a virus.
Exception is A/V & malware definitions, I will let them check and notify, but I decide to install.
Off topic:
Think of TheMailMan78 when I hear this...
As for Mailman using AMD ,I can vouch for him .....And he is our Whipping Post ;) (you new guys should clue in to his handle BANSTICK DUMMY,He earned it for a reason)He just Rustles your Jimmies,But has knowledge and experience So respect him.