Sony Rootkit fiasco

Bungleau · 11-11-2005, 03:35 PM

I thought there was a thread about this, but I can't find it. And I'm not sure this belongs in GD or CE, but I'll start it in GD. Choc's minions, feel free to move it if appropriate (like you need my permission [img]smile.gif[/img] ).

In short, Mark Russinovich, a Windows expert of some reknown, discovered that certain Sony CDs would install a rootkit on your computer if you tried to play the CD on it.

From Wikipedia... "A rootkit is a set of software tools frequently used by a third-party (usually an intruder) after gaining access to a computer system. These tools are intended to conceal running processes, files or system data, which helps an intruder maintain access to a system for purposes unbeknownst to the user."

The rootkit was (and is) poorly written, and degraded system performance. It's also not mentioned on the EULA, and there are no removal tools for it besides manual hacking. Which also can cause your system to fail... horribly.

Sony installed the rootkit as part of the copy protection for the CD. That Digital Rights Protection stuff? Yeah, that's it.

"The community" got up in arms, and Sony responded with a patch that made the rootkit visible, but didn't remove it. Sony's president even stated that "Most people don't know what a rootkit is, so why should they be worried about it?" Yeah, and my kids don't know what cyanide is, so....

Why's it an issue? Well, you don't know it's running on your system. That means that if I can sneak something into your system, you won't know it's there. Something like a trojan horse, or a virus, or just protected directories with files in them. Several viruses have already surfaced, and the AV companies are working to protect against it.

Today, Sony announced they're removing the rootkit from all CDs being produced right now while they sort it out. 'Course, that leaves the rest of the CDs out there ripe for the plucking...

And, in the one twist that I think makes this belong on GD and not Current Events, apparently some folks have used the rootkit to hide their cheating activities while playing World of Warcraft! Yep.... by protecting their machines and hiding their program files the same way Sony did, Warden can't see them, and won't know they're cheating.

Gamers. Always looking for that extra edge...

Apologies for not including links to external references. Google for "sony BMG rootkit" and you should find plenty.

*edit* Change that title ***

[ 11-11-2005, 10:56 PM: Message edited by: Bungleau ]

Sir Degrader · 11-11-2005, 04:35 PM

Wow, and to think, I thought Sony one of the "good guys"...

Zebodog · 11-11-2005, 05:13 PM

It's only a matter of time before something just as nefarious is created.

It's a shame that the music industry didn't take a page from the movie industry. Back when VHS/Betamax was introduced, the movie industry was in a huge uproar about it, saying it would be the death of their industry (paraphrased of course) It was, in fact, the exact opposite. The VHS tape took the movie industry to new heights.

Larry_OHF · 11-11-2005, 10:42 PM

Here is a related story.

Sorry, I am not aware of it being posted already, but your thread title makes it sound like it when you used the word "update".

Anyway, here is the related info. about a virus that exploits Sony's crap.

http://www.cnn.com/2005/TECH/interne...eut/index.html

This makes me worry. I do not have any Sony CD music, but I do have a Sony DVD player on my machine as well as an external DVD maker by Sony. I wonder if those are also trouble makers?

Bungleau · 11-11-2005, 10:59 PM

I changed the title, Larry, to take out the "update" stuff. That's the problem with looking in multiple places... sometimes you can't remember where you've been

I know that ZoneAlarm is going to treat the Sony stuff like a trojan, and other protective tools (AV, anti-spyware, etc) may also do so. I suspect your burner is okay, and unless the DVD player is fairly new, it's probably fine as well. I wouldn't know where to check if it weren't... perhaps by scanning the drive from another computer?

Felix The Assassin · 11-12-2005, 12:04 AM

It was posted in Zebo's thread about DRM. Shamrock UK is the one who made the first call on it:
http://www.theregister.co.uk/2005/11...ny_drm_trojan/

And a quick follow-up:
http://news.yahoo.com/s/pcworld/2005...pcworld/123511

Very interesting indeed.

[ 11-12-2005, 12:08 AM: Message edited by: Felix The Assassin ]

11-11-2005, 03:35 PM	#1
Bungleau 40th Level Warrior Join Date: October 29, 2001 Location: Western Wilds of Michigan Posts: 11,752	I thought there was a thread about this, but I can't find it. And I'm not sure this belongs in GD or CE, but I'll start it in GD. Choc's minions, feel free to move it if appropriate (like you need my permission [img]smile.gif[/img] ). In short, Mark Russinovich, a Windows expert of some reknown, discovered that certain Sony CDs would install a rootkit on your computer if you tried to play the CD on it. From Wikipedia... "A rootkit is a set of software tools frequently used by a third-party (usually an intruder) after gaining access to a computer system. These tools are intended to conceal running processes, files or system data, which helps an intruder maintain access to a system for purposes unbeknownst to the user." The rootkit was (and is) poorly written, and degraded system performance. It's also not mentioned on the EULA, and there are no removal tools for it besides manual hacking. Which also can cause your system to fail... horribly. Sony installed the rootkit as part of the copy protection for the CD. That Digital Rights Protection stuff? Yeah, that's it. "The community" got up in arms, and Sony responded with a patch that made the rootkit visible, but didn't remove it. Sony's president even stated that "Most people don't know what a rootkit is, so why should they be worried about it?" Yeah, and my kids don't know what cyanide is, so.... Why's it an issue? Well, you don't know it's running on your system. That means that if I can sneak something into your system, you won't know it's there. Something like a trojan horse, or a virus, or just protected directories with files in them. Several viruses have already surfaced, and the AV companies are working to protect against it. Today, Sony announced they're removing the rootkit from all CDs being produced right now while they sort it out. 'Course, that leaves the rest of the CDs out there ripe for the plucking... And, in the one twist that I think makes this belong on GD and not Current Events, apparently some folks have used the rootkit to hide their cheating activities while playing World of Warcraft! Yep.... by protecting their machines and hiding their program files the same way Sony did, Warden can't see them, and won't know they're cheating. Gamers. Always looking for that extra edge... Apologies for not including links to external references. Google for "sony BMG rootkit" and you should find plenty. edit Change that title *** [ 11-11-2005, 10:56 PM: Message edited by: Bungleau ] __________________ B Save Early, Save Often Save Before, Save After Two-Star General, Spelling Soldiers -+-+-+ Give 'em a hug one more time. It might be the last.

11-11-2005, 05:13 PM	#3
Zebodog Avatar Join Date: May 14, 2005 Location: Edmonton Age: 75 Posts: 578	It's only a matter of time before something just as nefarious is created. It's a shame that the music industry didn't take a page from the movie industry. Back when VHS/Betamax was introduced, the movie industry was in a huge uproar about it, saying it would be the death of their industry (paraphrased of course) It was, in fact, the exact opposite. The VHS tape took the movie industry to new heights. __________________ Disclaimer: If this thread, or a link within this thread leads you to follow advice that crashes/explodes/burns down or any way damages your system or causes personal stress or hardship, I am in no way responsible for any problems.

11-11-2005, 10:42 PM	#4
Larry_OHF Ironworks Moderator Join Date: March 1, 2001 Location: Midlands, South Carolina Age: 48 Posts: 14,759	Here is a related story. Sorry, I am not aware of it being posted already, but your thread title makes it sound like it when you used the word "update". Anyway, here is the related info. about a virus that exploits Sony's crap. http://www.cnn.com/2005/TECH/interne...eut/index.html This makes me worry. I do not have any Sony CD music, but I do have a Sony DVD player on my machine as well as an external DVD maker by Sony. I wonder if those are also trouble makers? __________________

11-11-2005, 10:59 PM	#5
Bungleau 40th Level Warrior Join Date: October 29, 2001 Location: Western Wilds of Michigan Posts: 11,752	I changed the title, Larry, to take out the "update" stuff. That's the problem with looking in multiple places... sometimes you can't remember where you've been I know that ZoneAlarm is going to treat the Sony stuff like a trojan, and other protective tools (AV, anti-spyware, etc) may also do so. I suspect your burner is okay, and unless the DVD player is fairly new, it's probably fine as well. I wouldn't know where to check if it weren't... perhaps by scanning the drive from another computer? __________________ B Save Early, Save Often Save Before, Save After Two-Star General, Spelling Soldiers -+-+-+ Give 'em a hug one more time. It might be the last.

11-12-2005, 12:04 AM	#6
Felix The Assassin The Dreadnoks Join Date: September 27, 2001 Location: Orlando, FL Age: 61 Posts: 3,608	It was posted in Zebo's thread about DRM. Shamrock UK is the one who made the first call on it: http://www.theregister.co.uk/2005/11...ny_drm_trojan/ And a quick follow-up: http://news.yahoo.com/s/pcworld/2005...pcworld/123511 Very interesting indeed. [ 11-12-2005, 12:08 AM: Message edited by: Felix The Assassin ] __________________ The Lizzie Palmer Tribute Let every nation know, whether it wishes us well or ill, that we shall pay any price, bear any burden, meet any hardship, support any friend, oppose any foe to assure the survival and the success of liberty. John F. Kennedy 35th President of The United States The Last Shot Honor The Fallen Jesus died for our sins, and American Soldiers died for our freedom. If you don't stand behind our Soldiers, please feel free to stand in front of them.

11-11-2005, 04:35 PM	#2
Sir Degrader Thoth - Egyptian God of Wisdom Join Date: November 3, 2001 Location: Canada Age: 63 Posts: 2,871	Wow, and to think, I thought Sony one of the "good guys"...

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Sony Vegas 6 help	Xen	General Discussion	1	05-19-2006 10:36 AM
Sony Reader	Knightscape	General Discussion	1	01-23-2006 05:49 AM
Update on Sony Rootkit fiasco	Bungleau	General Discussion	4	11-19-2005 09:24 AM
World Cup ticketing fiasco	Memnoch	General Conversation Archives (11/2000 - 01/2005)	14	06-08-2002 08:25 AM
----Sony Playstation 2----	GokuZool	General Conversation Archives (11/2000 - 01/2005)	7	11-13-2001 09:54 AM