CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
Donations. Become Premium Today! Premium Icon
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 951
Comments: 28
block bottom
spacer spacer
image Sony to offer patch for 'rootkit' DRM .... but the rootkit remains image
Cyber Security
ikeb writes "Sony fix removes cloaking, but not the 'rootkit'
By Andrew Orlowski in San Francisco Published Thursday 3rd November 2005 08:35 GMT

Sony BMG said today it will offer a patch for one of its own exploits - one that comes bundled with its music CDs.

The code cloaks itself and by intercepting and redirecting low level windows system calls, forces the audio through a custom player, and restricts the number of CD burns that can be made.

However, the patch that Sony will offer doesn't remove the 'rootkit' DRM: it only makes the hidden files visible.

Full story .... "
Posted on Friday, 04 November 2005 @ 09:10:43 UTC by Paul (2328 reads)
[ Trackback ]		image

"Sony to offer patch for 'rootkit' DRM .... but the rootkit remains" | Login/Create an Account | 1 comment | Search
Threshold
The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: Sony to offer patch for 'rootkit' DRM .... but the rootkit remains (Score: 1)
by ErikAlbert  on Friday, 04 November 2005 @ 16:18:24 UTC
(User Info | Send a Message)
I suppose the title could be slightly misleading depending on how you define rootkits.

The whole cloaking component is what i find most distasteful of the whole issue. No legimate software should ever have the need to hide from users. That is also the primary aim of rootkits of course.

The patch switching off the cloaking aspect, but the other functionality of it still functions, including the patching of kernel level APIs. Does that still quality as a rootkit?

The problem is that many legimate software in particular security software, does the same thing except it's not hidden. Would they then be considered rootkits?

Are we now defining software that patch kernel level apis for certain functionality as rootkits, no matter whether they are hidden to the user or not?


 
Login
spacer
Nickname

Password

Security Code: Type Security Code: Usage signifies AUP acceptance
· New User? · Click here to create a registered account.
block bottom
Related Links
spacer
· del.icio.us!
· digg it!
· reddit!
· TrackBack (0)
· Microsoft
· HotScripts
· W3 Consortium
· Sony HomePage
· More about Cyber Security
· News by Paul

Most read story about Cyber Security:
Booby Trapped software!
block bottom
Article Rating
spacer
Average Score: 0
Votes: 0

Please take a second and vote for this article:

Bad
Regular
Good
Very Good
Excellent
block bottom
Options
spacer

Printer Friendly Page  Printer Friendly Page
block bottom
2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved.
Acceptable Use Policy. Use signifies your agreement.
196ppm 0.110s (0.008s)
Making cybercriminals unhappy since 2002*
In Memory of Trpm
spacer spacer