Sony DRM rootkit Part 6: The Uninstaller is worse than the Rootkit

[Roc Ingersol]

New research has uncovered that Sony's rootkit 'uninstaller' is a more serious security threat (http://blogs.washingtonpost.com/securityfix/2005/11/sony_uninstall_.html) than Sony's DRM software.

A patch that Sony issued a week ago when virus writers began taking advantage of the software's file-hiding capabilities actually introduces serious new security risks onto the user's machine, according to research released today by Princeton University computer science professor Edward Felten.

The Sony Web page where users can download the removal patch installs a program that remains on the user's PC even after removal tool has done its job, Felten said. And because of the way the tool is configured, he said, it allows any Web page that the user subsequently visits to download, install and run any code that it likes.
I can't wait to see part 7! Maybe Sony executives will publicly set a legitimate customer on fire!

[Madhatter45]

You know, I wouldnt put it past them to set someone on fire. Hell they almost did with the fiasco with the small ps2 power supplys.

[nonchalance]

Jeebus.

This is insane.

[Zeal]

Sony is honestly out of control. This is nothing more than an intentional hijacking of PCs. It's a trojan in every sense of the word.

Solution: NEVER INSTALL ANY SOFTWARE WRITTEN BY SONY.

[Paranoia]

Its blunder after blunder for the Sony camp.

[TheKeck]

LATEST NEWS: Hitler true founder of Sony Corporation! Millions seek reparations from Japan!

[Captain Awesome]

Sony admits to creating PS3 shells out of ground-up fetuses.

[KNOTE]

Borys dies a little inside every time a new chapter is posted...

[whoamg]

With all this underhandedness and security threats, I'm not going to buy a PS3 for fear of what it may have. I am not going to take that risk.

[RMan]

Man, I'd hate to see how many dirty looks the developer of this thing gets. The money lost to piracy is likely starting to look like a good deal to Sony now.

[Achilles]

Rootkit is a total debacle. Very bad move by Sony. I wonder if MS makes a security patch to get rid of it could Sony could sue them for interfering with their software.

[goc_sin]

I know that Sony is in the wrong here, but isn't http://www.xcp-aurora.com/ the company that actually made Sony's DRM software? It may be Sony is taking slack for them and I would imagine that they will no longer be doing business.

[Subbacultcha]

Sony DRM made baby Jesus cry.

[GrinR]

Forgoing my usual loquaciousness...

LOL SONY

[Taco]

Rootkit is a total debacle. Very bad move by Sony. I wonder if MS makes a security patch to get rid of it could Sony could sue them for interfering with their software.

MS will, I don't expect Sony will do anything. I hope they do.

[Heretic Machine]

And in other news: Perigon still isn't buying dick from Sony.

[eatme]

Just as an extra bit of flair, they illegally used LGPL code without releasing the source.

http://yro.slashdot.org/article.pl?sid=05/11/15/1250229

[Zanzibar]

Only Sony could make Microsoft's support division look good by comparison.

[RMan]

And in other news: Perigon still isn't buying dick from Sony.
So which supplier did you go with :). (sorry, couldn't resist).

[Taco]

Just as an extra bit of flair, they illegally used LGPL code without releasing the source.

http://yro.slashdot.org/article.pl?sid=05/11/15/1250229

That was Part 5 (http://www.evilavatar.com/forums/showthread.php?t=7104) ;)

[Zurik]

Yeah, I'm totally not buying a PS3 either....because its not even out! I'm sure when it comes out, it will run over to your computer and give it a ton of viruses!

[Morrolan]

And in other news: Perigon still isn't buying dick from Sony.
Indeed. He is sticking with his long-time dick provider, Eduardo. ;)

[GodFather]

How funny would that be if this was some grand conspiracy of Bill Gates to tatter the Sony name and take over the console wars!!!

No wait, better yet, Playstation 3 censors what you do and dont watch on television once the PS3 is hooked up to your tv...no more MSNBC for you says PS3!

[Onea]

Ok, even I think this is pretty horrible.

[JediSanf]

The only saving grace for gamers (you know, that the PS3 doesn't end up exploding if it detects a non-Sony product in your house) is that the SCE division hasn't been anywhere near this fiasco.

Next week, when we find out that I'm wrong, I will denounce that I ever wrote this post.

[eatme]

That was Part 5 (http://www.evilavatar.com/forums/showthread.php?t=7104) ;)

Doh! I missed an ep.

[ÜberJumper]

Man, the guys that worked at that DRM company best not put their current jobs on their resume.

Interviewer "Where were you working in 2005"
Interviewee "Ummm I was on vacation playing Xbox games, yeah, Xbox games"

[Deathbane27]

http://bash.org/?577451

<DmncAtrny> I will write on a huge cement block "BY ACCEPTING THIS BRICK THROUGH YOUR WINDOW, YOU ACCEPT IT AS IS AND AGREE TO MY DISCLAIMER OF ALL WARRANTIES, EXPRESS OR IMPLIED, AS WELL AS DISCLAIMERS OF ALL LIABILITY, DIRECT, INDIRECT, CONSEQUENTIAL OR INCIDENTAL, THAT MAY ARISE FROM THE INSTALLATION OF THIS BRICK INTO YOUR BUILDING."
<DmncAtrny> And then hurl it through the window of a Sony office
<DmncAtrny> and run like hell

:D

[Twigz'N'Berries]

Indeed. He is sticking with his long-time dick provider, Eduardo. ;)
Freaking hilarious....

Well, as much as I would like to predict doom and gloom, I'm not even sure anyone in the general public knows about it. But Sony's business practices have seen more scrutiny lately...especially when we just had an article about Sony leading a price fixing cartel posted too. Sony execs may feel as if they are operating under an air of invincibility, but they had better rethink that position quickly. The lawsuits they have to pay for these suits if found guilty will not bankrupt them, but it will be another hit to their bottom line.

[LilBunnyFuFu]

I haven't laughed so hard in a thread in a while. The whole EULA on a brick is fucking hilarious. My prediction for episode 7, its found that the power source for the PCs that coded that DRM was actually the harvested souls of orphans. This is the greatest thing ever. Sony is the most h4rdc0r3 h4x0r around. When do you think shirts will start to pop up about Sony and the DRM?

[Taco]

I suspect this is getting more coverage than people think. I'm reading it from sources other than the EAs and Slashdots without even looking for it.

Good amount of sites (http://news.google.com/news?hl=en&ned=us&ie=UTF-8&ncl=http://news.zdnet.com/2100-1009_22-5954154.html) and I don't think it's peaked yet. Thanks to all the well publicized security holes in Windows that have been heavily reported for two years now, something like this grabs headlines.

[Magnanimous Gnome]

Sony admits to creating PS3 shells out of ground-up fetuses.

Hell, I'd buy one then. :cool:

With all this underhandedness and security threats, I'm not going to buy a PS3 for fear of what it may have. I am not going to take that risk.

Well, it will have Blue Ray, which is filled to the brim with DRM. Then again HDDVD assuredly is as well, so you're pretty much screwed with either of those formats. Their even looking into making Blue Ray players sort of self-destruct if they are "used improperly."

So which supplier did you go with :). (sorry, couldn't resist).

That's between me and Perigon. ;)

Indeed. He is sticking with his long-time dick provider, Eduardo. ;)

What?? Perigon - who the fuck is Eduardo? You cheating bastard!! :eek:

When do you think shirts will start to pop up about Sony and the DRM?

I'm surprised they haven't already. Somebody needs to get the Internet Geek Machine in motion, stat!

[Murmillo]

This thread is the best!.
Wow, any body see this one coming? Its like every move they make they only dig themselves deeper. At which point do they just stop everything and not do anything else. Sony is stuck in the proverbial quick sand.

[gojira]

Well, as much as I would like to predict doom and gloom, I'm not even sure anyone in the general public knows about it. ...
Well, in the Bay Area, this article (http://sfgate.com/cgi-bin/article.cgi?file=/chronicle/archive/2005/11/11/MNGFMFMNV61.DTL&type=tech) appeared on the front page of a major news paper, the Chronicle. Not the front page of the business section or the technology section, mind you, the front page of the whole she-bang.

[Fuzzy]

Microsoft said it would remove controversial copy-protection software that CDs from music publisher Sony BMG install on personal computers, deeming it a security risk to PCs running on Windows.

http://www.wired.com/news/business/0,1367,69575,00.html?tw=rss.TOP

[Hellstorm]

What is today pick on Sony day??

[ÜberJumper]

http://www.wired.com/news/business/0,1367,69575,00.html?tw=rss.TOP

OMG, Microsoft to the Rescue! I love their anti-spyware stuff!

[Zeal]

They just got served.

[Mason]

It's funny, I actually can't believe all of this Sony stuff is true anymore. Show me any amount of evidence, and it still won't convince me that a company could keep fucking up this badly.

...but then I've been saying the same thing about a president for five years now, so I guess I need to readjust my expectations regarding human ignorance and mendacity.

[mister_slim]

...but then I've been saying the same thing about a president for five years now, so I guess I need to readjust my expectations regarding human ignorance and mendacity.
Problem is those damn things just can't be calibrated low enough.

[LilEvilFish]

Damn I've missed all this, gotta think fast..

F&*K MICROSO.. HANG ABOUT! but but but don't Sony deliver presents to children all over the world on a single night in december?!

[Taco]

but but but don't Sony deliver presents to children all over the world on a single night in december?!

Hmm, well there is that lawsuit in reguards to the hardware issues with the PS2. Have the courts decided who gets paid yet?

[AniAko]

*Looks around*

6 pages without a Player 1 comment? Does this mean the war is over?

[Magnanimous Gnome]

*Looks around*

6 pages without a Player 1 comment? Does this mean the war is over?


Apparently. Maybe he's like Beetle Juice...

Player 1
Player 1
Player 1

No?

Maybe Bloody Mary instead...

*stands in front of mirror*

Player 1
Player 1
repeat 11 more times...

Oh well, at least I tried.

[shiznit]

as of right now i am boycotting all sony products, this has gone too far. when you make microsoft look like a pillar of corporate ethics something is very wrong. burn in hell sony.