About RSS
Search for: in 

Windows Watch - an XP & Vista blog

IT security
Worm authors could exploit the Sony feature to hide malicious applications
R E L A T E D   C O N T E N T

Free email newsletters




Jargon Buster

ADVERTISEMENT

Sony rapped over music CD rootkit

Record label backtracks after public outrage over cloaking technology

Tom Sanders in California, vnunet.com 03 Nov 2005
ADVERTISEMENT

Sony has released a patch for a music CD anti-piracy technology after security experts warned that it represents a potential security risk. 

The copyright protection software would automatically install when a consumer inserted a music CD with the XCP digital rights management technology in their computers.

The software is designed to limit the number of copies that users can make of the CD and restrict ripping of the disk.

Software developer Mark Russinovich, of Sysinternals, reported on Monday that he had detected a secretly installed rootkit on his system. 

Russinovich traced the software back to Sony and the XCP technology back to First 4 Internet, an English software developer. 

The rootkit served to hide the digital rights management technology from the user as well as the system itself, including from antivirus software. When Russinovich tried to remove the application, he found that his CD drive was disabled.

Sony uses the rootkit to prevent the user from removing the copyright protection technology and violating Sony's copyright. But worm authors could exploit this feature to hide malicious applications.

The patch will remove the cloaking capability of the software to enable users to remove the Sony tool. But this will render their systems incapable of playing the CD.

See also:

AOLTalk is not cheap  31 Oct 2005
TrustedFlash MicroSD memory cardsConsumers will be able to buy music on Flash memory cards this autumn  28 Sep 2005
Open digital rights technology aimed at furthering digital content  23 Aug 2005
MicrosoftDocument-level digital rights management in the pipeline  06 Jul 2005
Microsoft and Philips sign 'long-term non-exclusive agreements'Integration of Media player and Nexperia semiconductors  12 May 2005

All Software Licensing & Piracy

Like this story? Spread the news by clicking below:

Post this to Delicious del.icio.us    Post this to Digg Digg this    Post this to reddit reddit!

Permalink for this story
R E A D E R   C O M M E N T S

M A R K E T P L A C E
Sponsored links
F E A T U R E D   J O B S
London, United Kingdom | Mulvaney Capital Management Limited
     Senior SQL Developer - Hedge Fund - London, Competitive Experienced SQL based database developer sought to join systematic trading group. The role will focus initially on all aspects of market  data collection and database design, programming ... more >
York, North Yorkshire, United Kingdom | MyKnowledgeMap Ltd
Web Developers, York, North Yorkshire, Up to £28,000 depending on experience and pension A fantastic opportunity has just opened for enthusiastic Web Developers. Successful candidates will join the company's expanding team of developers, working on ... more >
London, United Kingdom | Calumo Group
CALUMO Group is a leading provider of Business Intelligence and Performance Management solutions.    We work in partnership with our clients to help them improve their Planning, Budgeting and Reporting Processes.  Clients include Ernst & ... more >
Elstree, United Kingdom | NHS Blood and Transplant
  Operations Engineer, Bio Productory Laboratory,  £28,313 - £37,326 pa plus High Cost Area Supplement, Elstree About us The National Blood Service is an integral and vital part of the NHS. Our two million volunteer donors contribute ... more >
More job opportunities
Join our fight for a fair deal when shopping online
ADVERTISEMENT