AMD to Get Rid of Catalyst Auto-Update Feature in 2013, Cites Security Concerns

[btarunr]

It looks like somebody found a security vulnerability in the auto-update feature of AMD Catalyst Control Center (CCC), which notifies you of updates to Catalyst system software and directs you to the download page. AMD announced that it plans to discontinue the feature starting in 2013, and recommends that you get your driver updates the old-fashioned way: by keeping up with the news and getting your drivers from the internet. Due to the severity of the exploit, AMD recommended users to disable auto-updates in their current CCC configuration, or click on "skip" whenever it prompts you to update drivers. AMD stated:

AMD will be removing the auto-update notification functionality from versions of AMD Catalyst Control Center running under Windows Vista, Windows 7 and Windows 8, beginning in early 2013. Due to a minor security vulnerability in the auto-update notification, users are recommended to update to the latest AMD Catalyst driver release from the amd.com web site. Alternatively, users should (i) uncheck the "Automatically check for updates" option under AMD Catalyst Control Center > Information > Software Update, and (ii) choose to "Skip" notifications from the AMD Catalyst driver, which notifications recommend updating to the latest driver.

View at TechPowerUp Main Site

 

[PLAfiller]

Awesome, I hope nVidia will follow with the nVidia Update feature. I never install it, when doing Custom installation anyway. I just don't see the point of it.

 

[zsolt_93]

I never install it either... But it installs itself somtimes even if you deselect it.. i'm talking about the nvidia one here.

 

[RejZoR]

I'd like an antivirus style incrimental update. Why always download 180MB big package if only fraction of the data has actually changed.

 

[aayman_farzand]

"minor security vulnerability" and they are removing the feature entirely instead of fixing it? Smart.

I don't use auto-update for my cards, but sometimes I see SLI profiles being installed automatically, good convenience to have.

 

[Stephen.]

Awesome, I hope nVidia will follow with the nVidia Update feature. I never install it, when doing Custom installation anyway. I just don't see the point of it.

Just what i wanted to say

 

[Stephen.]

I never install it either... But it installs itself somtimes even if you deselect it.. i'm talking about the nvidia one here.

Happens with Express Install.

I always use Custom Installation, which allows removal of what you don't want installed, plus if by some chance it persists and installs just go to add remove program and uninstall it.

 

[hardcore_gamer]

I never install it either... But it installs itself somtimes even if you deselect it.. i'm talking about the nvidia one here.

I blocked the nvidia driver using firewall. Problem solved.

 

[renz496]

vote for the notification only.

 

[HossHuge]

vote for the notification only.

I do the same with all my programs

 

[WhiteLotus]

Damn. Now I'm going to have to be less lazy and actually go after updates myself. I liked being pleasantly surprised every now and then when it said I could update my drivers.

 

[TheMailMan78]

Awesome, I hope nVidia will follow with the nVidia Update feature. I never install it, when doing Custom installation anyway. I just don't see the point of it.

Nvidia update just lets you know there is an update avalible. It doesnt auto install anything. Don't know what the big deal is as you still have to manually install the driver. All the update does it throw up a little flag in the corner and say "Hey there is an update on the website for yo sh1t dawg!".

AMD update is all like "ALL YOUR BASE ARE BELONG TO US" and bombs your rig with trojans.

 

[RejZoR]

Well, i only got a notification with AMD Catalyst as well. It dodn't install anything by itself.

 

[newtekie1]

Both only alert you there is a driver update, they do not automatically install anything.

My guess is that the vulnerability in AMDs system allows someone to make the system alert the user there is an update and points them to a fraudulent site to download the "update" but that "update" could be anything, likely a virus.

 

[manofthem]

I usually know theres an update by someone posting it here, whether a news post or a user post. Occasionally I'll check myself on AMD's site.

 

[lyndonguitar]

Nahh, I don't use the feature anyway, If anything, it just bothers me. I update when I want to update.

 

[esrever]

Nvidia update just lets you know there is an update avalible. It doesnt auto install anything. Don't know what the big deal is as you still have to manually install the driver. All the update does it throw up a little flag in the corner and say "Hey there is an update on the website for yo sh1t dawg!".

AMD update is all like "ALL YOUR BASE ARE BELONG TO US" and bombs your rig with trojans.

Can't tell if just stupid or didn't read the article and has never owned an AMD card.

 

[TheMailMan78]

Can't tell if just stupid or didn't read the article and has never owned an AMD card.

Never installed a driver that gave me a virus unlike you I assume.

 

[Ravenas]

Never installed a driver that gave me a virus unlike you I assume.

I'm sorry but your post made no sense. Apparently you have never installed Catalyst Suite software?

 

[TheMailMan78]

I'm sorry but your post made no sense. Apparently you have never installed Catalyst Suite software?

Tons of times. Thats why I went NVIDIA.

 

[Ravenas]

Tons of times. Thats why I went NVIDIA.

No wonder you came trolling this thread with a OP that made no sense.

 

[TheMailMan78]

No wonder you came trolling this thread with a OP that made no sense.

You shouldn't call people names.

 

[95Viper]

Just like the rest of my software/apps/OS... I will handle update tasks myself.
Exception is A/V & malware definitions, I will let them check and notify, but I decide to install.

Off topic:

Think of TheMailMan78 when I hear this...

 

[H82LUZ73]

I have never used the auto update thing myself...it made as much sense as the STEAM Auto Driver update a few years back,By the time it had any drivers too update you already went to AMD games site to download them.

As for Mailman using AMD ,I can vouch for him .....And he is our Whipping Post (you new guys should clue in to his handle BANSTICK DUMMY,He earned it for a reason)He just Rustles your Jimmies,But has knowledge and experience So respect him.

 

[INSTG8R]

Not ever used it. I don't let anything "Auto Update" outside of Java and Flash and even then I still end up checking manually for updates before they ever let me know. But on the off chance I do let them slide it will eventually wake me up to an update.