----- Original Message -----
From: "Phyllis Stevens" <catlady1949@xxxxxxxxxxx>
To: <blindtech@xxxxxxxxxxxxxxx>
Cc: "Blind-x" <BLIND-X@xxxxxxxxxxxxxxxxxxxxx>
Sent: Friday, November 04, 2005 5:01 AM
Subject: Wow real interesting
From an e-mail I get. Thought this might be interesting to you all! --- ------ Greetings everyone!
Blogs and forums all over the Internet are buzzing with indignation
concerning Sony BMG's latest anti-piracy tool on their CD's. According to
the blog entries
and forum posts Sony BMG is surreptitiously installing a small piece of
software called a rootkit. The piece of software is supposed to stop people
from
being able to easily pirate the music contained on the CD's. Many of the
people discussing this issue are concerned with the security risks involved
with
this hidden software. Apparently getting rid of this piece of software is
not easy and can result in the CD drive not functioning if you try to remove
it.
Has Sony BMG really stooped this low in order to protect their bottom line?
It appears they have. Mark Russinovich at Sysinternals first wrote about
this
in his blog on October 31, 2005. Mr. Russiovich was testing the latest
version of RootkitRevealer (RKR) when he found the hidden software. His blog
contains
a very detailed analysis of how he tracked down the software and linked it
to a Sony BMG CD.
Having found the software, which is technically a rootkit, Mr. Russiovich
wanted to remove it, but couldn't find it listed in the Add/Remove Program
List,
nor could he find any uninstall utility. Checking the End User License
Agreement (EULA) he found no mention of any software being installed which
couldn't
be uninstalled. At this point he attempted to remove the rootkit by deleting
all associated files and registry keys, this is when he discovered that
removing
all these files and keys disabled his CD drive. Mr. Russiovich became
concerned that normal everyday users who discover this rootkit by using RKR
or a
similar program may attempt to remove it and cripple their computers.
Sony BMG has admitted that they do install a piece of software, but they claim it is harmless and posses no security threat to computers it is installed on. Several security related companies disagree. F-Secure was concerned enough about malicious code writers using this rootkit to hide their viruses, worms and trojans that they didn't release their findings until after they had talked to Sony BMG.
Due to pressure from consumers and the computer security sector Sony BMG has
released a service pack to remove the rootkit or as they call it "the
cloaking
technology component". Removing this piece of controversial software will
stop you from being able to listen to the "protected" CD's on your computer,
something you may wish to keep in mind.
Indignantly, images/Myst the Myth Buster
Mark Russiovich's Sysinternals Blog: http://www.sysinternals.com/blog/2005/10/sony-rootkits-and-digital-rights.html
F-Secure's Weblog: http://www.f-secure.com/weblog/archives/archive-112005.html
Sony BMG's FAQ about the content protection software: http://cp.sonybmg.com/xcp/english/faq.html
Did you know?
On December 06, 1877 Thomas Edison made the first recording of a human voice
"Mary had a little lamb" on the first tinfoil cylinder phonograph.
catlady1949@xxxxxxxxxxx
add me to your MSN:
Catlady1949@xxxxxxxxxxx
------------------------ Yahoo! Groups Sponsor --------------------~--> Fair play? Video games influencing politics. Click and talk back! http://us.click.yahoo.com/T8sf5C/tzNLAA/TtwFAA/67folB/TM --------------------------------------------------------------------~->
BlindTech is a service of MosenExplosion.com. To find out about the other e-mail lists we run, please visit us on the web at http://www.MosenExplosion.com
Yahoo! Groups Links
<*> To visit your group on the web, go to: http://groups.yahoo.com/group/blindtech/
<*> To unsubscribe from this group, send an email to: blindtech-unsubscribe@xxxxxxxxxxxxxxx
<*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
__________ NOD32 1.1275 (20051103) Information __________
This message was checked by NOD32 antivirus system. http://www.eset.com
