Ironworks Gaming Forum

Ironworks Gaming Forum (http://www.ironworksforum.com/forum/index.php)
-   General Discussion (http://www.ironworksforum.com/forum/forumdisplay.php?f=36)
-   -   Sony Rootkit fiasco (http://www.ironworksforum.com/forum/showthread.php?t=94465)

Bungleau 11-11-2005 03:35 PM

I thought there was a thread about this, but I can't find it. And I'm not sure this belongs in GD or CE, but I'll start it in GD. Choc's minions, feel free to move it if appropriate (like you need my permission [img]smile.gif[/img] ).

In short, Mark Russinovich, a Windows expert of some reknown, discovered that certain Sony CDs would install a rootkit on your computer if you tried to play the CD on it.

From Wikipedia... "A rootkit is a set of software tools frequently used by a third-party (usually an intruder) after gaining access to a computer system. These tools are intended to conceal running processes, files or system data, which helps an intruder maintain access to a system for purposes unbeknownst to the user."

The rootkit was (and is) poorly written, and degraded system performance. It's also not mentioned on the EULA, and there are no removal tools for it besides manual hacking. Which also can cause your system to fail... horribly.

Sony installed the rootkit as part of the copy protection for the CD. That Digital Rights Protection stuff? Yeah, that's it.

"The community" got up in arms, and Sony responded with a patch that made the rootkit visible, but didn't remove it. Sony's president even stated that "Most people don't know what a rootkit is, so why should they be worried about it?" Yeah, and my kids don't know what cyanide is, so....

Why's it an issue? Well, you don't know it's running on your system. That means that if I can sneak something into your system, you won't know it's there. Something like a trojan horse, or a virus, or just protected directories with files in them. Several viruses have already surfaced, and the AV companies are working to protect against it.

Today, Sony announced they're removing the rootkit from all CDs being produced right now while they sort it out. 'Course, that leaves the rest of the CDs out there ripe for the plucking...

And, in the one twist that I think makes this belong on GD and not Current Events, apparently some folks have used the rootkit to hide their cheating activities while playing World of Warcraft! Yep.... by protecting their machines and hiding their program files the same way Sony did, Warden can't see them, and won't know they're cheating.

Gamers. Always looking for that extra edge... :D

Apologies for not including links to external references. Google for "sony BMG rootkit" and you should find plenty.

*edit* Change that title ***

[ 11-11-2005, 10:56 PM: Message edited by: Bungleau ]

Sir Degrader 11-11-2005 04:35 PM

Wow, and to think, I thought Sony one of the "good guys"...

Zebodog 11-11-2005 05:13 PM

It's only a matter of time before something just as nefarious is created.

It's a shame that the music industry didn't take a page from the movie industry. Back when VHS/Betamax was introduced, the movie industry was in a huge uproar about it, saying it would be the death of their industry (paraphrased of course) It was, in fact, the exact opposite. The VHS tape took the movie industry to new heights.

Larry_OHF 11-11-2005 10:42 PM

<font color=skyblue>Here is a related story.

Sorry, I am not aware of it being posted already, but your thread title makes it sound like it when you used the word "update".

Anyway, here is the related info. about a virus that exploits Sony's crap.


http://www.cnn.com/2005/TECH/interne...eut/index.html


This makes me worry. I do not have any Sony CD music, but I do have a Sony DVD player on my machine as well as an external DVD maker by Sony. I wonder if those are also trouble makers?
</font>

Bungleau 11-11-2005 10:59 PM

I changed the title, Larry, to take out the "update" stuff. That's the problem with looking in multiple places... sometimes you can't remember where you've been ;)

I know that ZoneAlarm is going to treat the Sony stuff like a trojan, and other protective tools (AV, anti-spyware, etc) may also do so. I suspect your burner is okay, and unless the DVD player is fairly new, it's probably fine as well. I wouldn't know where to check if it weren't... perhaps by scanning the drive from another computer?

Felix The Assassin 11-12-2005 12:04 AM

<font color=8fbc8f>It was posted in Zebo's thread about DRM. Shamrock UK is the one who made the first call on it:
http://www.theregister.co.uk/2005/11...ny_drm_trojan/

And a quick follow-up:
http://news.yahoo.com/s/pcworld/2005...pcworld/123511

Very interesting indeed.</font>

[ 11-12-2005, 12:08 AM: Message edited by: Felix The Assassin ]


All times are GMT -4. The time now is 09:28 PM.

Powered by vBulletin® Version 3.8.3
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
©2024 Ironworks Gaming & ©2024 The Great Escape Studios TM - All Rights Reserved