Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Security

November 4th, 2005, 11:33 GMT · By Tudor Raiciu

Sony Releases Patch for Rootkit Problem

SHARE:

Adjust text size:



After making the headlines with one piece of news few were happy to hear about, Sony released a patch that reveals hidden files that are automatically installed to hard drives when some of its music CDs are played on personal computers.

Considering rootkits are invisible to many detection tools, including antivirus, host and network intrusion-detection
sensors and antispyware products, having such an important company as Sony use these elements was very disturbing and caused a very strong reaction from the public.

Sony admitted using this software in order to prevent further piracy as the copy protection technology limits how many times a CD can be copied, was included on about 20 titles, including discs from The Bad Plus and Vivian Green, among others.

Furthermore, Sony spokesman John McKay said the technology had been on the market for about eight months and there had been no major complaints before Windows expert Mark Russinovich posted a Web log report on how he found hidden files on his PC after playing a Van Zant CD.

The downloadable fix is called "Service Pack 2" but it should not be confused with Microsoft's Service Pack 2 for Windows XP.

TELL US WHAT YOU THINK:

2,556 hits · 1 comment · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


New undetectable spyware coming up

Sony DRM Does Rootkit Behind Users' Back

READER COMMENTS:


Comment #1 by: Sjaaksken on 04 Nov 2005, 19:12 UTC reply to this comment

If a netbot owner risks 50 year of jailsentence by using spyware why doesn't the sony management that decided to include this spyware on the cd's risk the same amount? Doesn't it mean large companies are rather untouchable against punishments for the same crimes committed by normal citizens?

As I 've read the original weblog of Mark Russinovich, it became clear that there is NO MENTION what so ever in the EULA on the targeted CD's that software is goin to be installed. Furthermore they don't ask for your approval to install the software! And to complete the spyware definition once installed no option to uninstall had been given. If it wasn't detected by Mark Russinovich this piece of spyware would still be installed right now. That there has been no major complaints in 8 months is irrelevant because, as Mark Russinovich's weblog states, the rootkit can be used by other spyware software to HIDE themselves from the system. Even so if you try to delete the spyware yourself your CD drive becomes unusable because it installs an extra driver on your cd-rom system files.

Where it comes down to is that the software is 100% spyware, and in fact the way Sony invaded your privacy and exposed your system to vulnerabilities and other spyware attacks is unnacceptable. I hear heavy sentences are asked for spyware makers, why would that be different in the Sony spyware story?

Apparently the 'little fish' get crucified, as there are spyware makers caught every day and they get demonised, like they're the pure essence of evil. I would just like to see that the 'big fish' ie the big companies like sony get punished the same way, and people atleast have the same judgement about that company as they have on other spyware makers. But then again, it's easier picking on a single person than it is picking on a multinational company.

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM