Via has posted a new AGP driver for its chipsets using Windows XP.
News source: VIA Arena
Download: VIA AGP driver version 4.10b for WinXP (HTTP)
Download: VIA AGP driver version 4.10b for WinXP (FTP)
- A little present for performance freaks: Part of the 4 in 1 driver set is an AGP driver. Now available, is an AGP driver version 4.10b which is Microsoft certified. In due course it will be put into the next update of the 4 in 1 drivers. The version of the AGP driver in the current 4.37(a) 4 in 1 drivers is the 4.05c. The 4.10b has been designed to enhance performance under Windows XP. Tested on a KT266A chipset motherboard with a GeForce 3, and WinXP, this driver provided an extra 3 fps in Quake III and an extra 100 marks in 3D Mark 2001.
News source: VIA Arena Download: VIA AGP driver version 4.10b for WinXP (HTTP) Download: VIA AGP driver version 4.10b for WinXP (FTP)
But after successfully testing his technique for friends on other cable modem services - and studying further the specifications for DOCSIS, the standard interface used by most cable modem manufacturers - Hallacy decided he had uncovered a bona fide security vulnerability.
This week, Hallacy submitted a description of his technique to two e-mail discussion lists run by SecurityFocus.com that are read by thousands of computer security aficionados.
But the description by Hallacy may be the most specific ever posted to such a public forum. And experts said his claim that not only AT&T but also some Comcast and Time Warner cable systems are vulnerable, may spur operators to make changes to their networks - or risk similar poking and prodding by other networking gurus.
In some instances, the technique could potentially be exploited even to take control of a cable ISP's gateway computers, alter their network routing, and shift large amounts of traffic to a specified destination, Hallacy claimed.
Dave Ahmad, moderator of the Bugtraq security mailing list, said he did not immediately approve Hallacy's submission because it described "how to evade (cable operators') service restrictions" and because he was "not sure what the benefit was to the community. Who is at risk if the information is not made public?"
Ahmad posted his comments, along with Hallacy's advisory, in a message Tuesday to the Vuln-Dev list, which published a pared back version of Hallacy's report on Monday.
Hallacy said he debated the morality of publishing his hacking instructions, but finally decided to do so as "a little bit of a smack in cable companies' direction. People are exploiting this. It's one of the reasons there's not enough bandwidth on some nodes, and they need to fix it."
News source: Newsbytes
View: Original submission on Bugtraq's vuln-dev mailing list (by Dave Ahmad)
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.