Updated:01:51 AM EDT Sep 30


this is ggmania.com subsite Certified Drivers Apparently Unsafe - TechAmok

Certified Drivers Apparently Unsafe - [security]
05:07 PM EDT - Aug,16 2019 - post a comment

Eclypsium, an Oregon security company, claims that drivers on Microsoft's Windows platform are a security mess. Who could have guessed? Their researchers found serious flaws in more than 40 drivers from at least 20 different hardware vendors. Apparently every single one of these vulnerabilities allows the driver to hand over "access to the hardware resources, such as read and write access to processor and chipset I/O space, Model Specific Registers (MSR), Control Registers (CR), Debug Registers (DR), physical memory and kernel virtual memory. This is a privilege escalation as it can move an attacker from user mode (Ring 3) to OS kernel mode (Ring 0)." Basically, complete control of the impacted machine. Not only that, these potentially allow malware to compromise your UEFI and persist across an operating system re-installation. They also add that not only do these drivers provide the necessary access, they also provide the mechanism to make changes. Scary stuff.

What's perhaps most interesting is that every driver they tested was signed by a Certificate Authority and had Microsoft's stamp of approval on them. Tie that to the fact that you can no longer block updates on Home versions of Windows 10, and you've got one heck of a potentially serious problem. In other words, these impacted problematic drivers are almost certainly going to be installed on possibly millions of PCs. If you were thinking that you can just stick with Windows 7 to be safe from these vulnerabilities, sadly, all modern versions of Windows are impacted. You can block updates on Windows 7, however, that's likely not a solution since there is a good chance you're already running problematic drivers. You may also be later to receive a patch for older versions of Windows as the newest version is prioritized.

Short overview of recent news articles

AMD Radeon Software Adrenalin 2020 Edition 20.9.2 - (Sep,30 2020 )

NVIDIA GeForce 456.55 WHQL driver (Sep,28 2020 )

Resident Evil: Infinite Darkness CG series coming to Netflix (Sep,27 2020 )

Manufacturers response on NVIDIA RTX 3080 issues during gaming (Sep,26 2020 )

RTX 3090 8K Gaming (Sep,26 2020 )

Windows XP source code allegedly leaked online (Sep,25 2020 )

Here's How You Can Twist Your Eye Around Your Pupil (Sep,25 2020 )

Amazon Enters the Ring with Luna, its Game Streaming Service (Sep,25 2020 )

RTX 3080 Users Report Crashes to Desktop While Gaming (Sep,25 2020 )

Sega developing live-action Yakuza film (Sep,24 2020 )

Samsung Expands Galaxy S20 Series With More-Affordable Fan Edition (Sep,24 2020 )

Adobe Acrobat Reader can now Reformat PDFs for Easy Reading on (Sep,24 2020 )

Nokia Updates Entry-Level Phones (Sep,24 2020 )

GeForce RTX 3090 is only 10-15% faster than the RTX 3080 (Sep,24 2020 )

Model Builder Builds A Coliseum With 22,000 Dominos (Sep,22 2020 )

What's Inside $18,000,000 Luxury Doomsday Bunker? (Sep,22 2020 )

WeChat and TikTok Still Available in US; Future Uncertain (Sep,22 2020 )

NVIDIA Responds to Criticism Surrounding the RTX 3080 Launch (Sep,22 2020 )

World's Largest Devil's Toothpaste Explosion (Sep,20 2020 )

Apple One Bundles Apple Services, Including new Apple Fitness+ (Sep,20 2020 )

Apple Watch SE Starts at $279 (Sep,20 2020 )

Apple Watch Series 6 Measures Blood Oxygen (Sep,20 2020 )

Life is Strange 2 Episode 1 Now Free (Sep,18 2020 )

NVIDIA GeForce 456.38 WHQL Released (Sep,17 2020 )

AMD Releases Radeon Software Adrenalin 20.9.1 (Sep,17 2020 )

Nvidia-Branded CPUs might be a possibility in near future (Sep,16 2020 )

Private data gone public: Razer leaks 100,000+ gamers info (Sep,16 2020 )

Crysis Remastered 8K Tech trailer (Sep,15 2020 )

Star Wars: Squadrons - "Hunted" CG Short (Sep,15 2020 )

LG Wing Boasts Swivel Screen (Sep,14 2020 )

NVIDIA to Acquire Arm for $40 Billion (Sep,14 2020 )

Boundary: Raytracing Benchmark (Sep,14 2020 )

NVIDIA: GeForce RTX 3080 Reviews Delayed (Sep,13 2020 )

What If We Detonated All Nuclear Bombs in Space at Once? (Sep,12 2020 )

WAP Sign Language (Sep,12 2020 )

Android Go Updated to be More Efficient on More Devices (Sep,12 2020 )

Bose Intros QC Earbuds with Advanced ANC (Sep,12 2020 )

NVIDIA GeForce RTX 3080 - Official Unboxing (Sep,10 2020 )

Dune Official Trailer (Sep,10 2020 )

Xbox Series S announced, priced at $299 (Sep,08 2020 )

Android 11 Released (Sep,08 2020 )

i'm thinking of ending things - Official Trailer (Sep,07 2020 )

Novak Djokovic Defaulted From US Open (Sep,06 2020 )

Acer Aspire 5 with AMD Ryzen 7 4700U unboxing and first impressions (Sep,06 2020 )

Honor MagicBook Pro unboxing and first impressions (Sep,06 2020 )

NVIDIA Marbles at Night tech demo (Sep,05 2020 )

Facebook Technologies Stops Sales of Oculus VR Headset in Germany (Sep,04 2020 )

NO TIME TO DIE Trailer (New 2020) James Bond, Daniel Craig (Sep,04 2020 )

The Witcher: Blood Origin May See Jason Momoa Joining the Cast (Sep,04 2020 )

MoveTime Family Watch MT43A (Sep,03 2020 )

>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs