Trojan Using Sony DRM Rootkit Spotted 597
Analise writes "The Register reports on the first trojan using Sony's DRM rootkit. A newly discovered variant of the Breplibot trojan makes use of the way Sony's rootkit masks files whose filenames begin with '$sys$'. This means that any files renamed this way by the trojan are effectively invisible to the average user. The malware is distributed via an email supposedly from a reputable business magazing requesting that the businessperson verify his/her attached 'picture' to be used for an upcoming issue. Once the payload is executed, the trojan then installs an IRC backdoor on affected Windows systems."
Rant Time... (Score:2, Interesting)
Boycott Sony (Score:5, Interesting)
Also here [first4internet.com] is the company that created the DRM technology.
From the article, virus firms response (Score:3, Interesting)
Ooh fun to be had here. Sony are gonig to love this publicity.
Ha ha. I have little respect for these companies who I see to be the same as those who four hundred years ago sold "herbs" to protect you from the plague. These ppl still profit from ppl's lack of knowledge.
Really easy test to see if you're vulnerable (Score:5, Interesting)
1) If you're not using windows, you're fine.
2) Create a file on your desktop ('test.txt' should be fine). Rename the file to '$sys$test.txt'.
If the file is gone, you're vulnerable.
Back again to Windows Security (Score:5, Interesting)
As an OS X user, I'd find it slightly odd that my music CD is prompting me for an administrative password.
But to stay on topic, I'm sure this is but one of the many exploits that will be based on this rootkit.
Does anyone have a comprehensive list of CDs that install it, and is it true that Sony has been using it since April?
Sony's actions recently mean they've lost my money (Score:3, Interesting)
Secondly, does this rootkit install even if you are logged in as a normal Windows user, not Administrator? That suggests a security hole in Windows. However I suspect the issue is Windows making users Administrator by default, which is a really dumb system, security wise.
Re:Back again to Windows Security (Score:3, Interesting)
On OS X, accounts marked as Administrators are really regular users who happen to have sudo powers, so you have to type in your password.
Re:A Natural Rights perspective (Score:3, Interesting)
Google [google.com] for some great links.
sony vs. microsoft (Score:3, Interesting)
Lawsuits if this thing DDoSes the net (Score:4, Interesting)
If someone creates a worm that exploits a negligent design flaw in Sony's DRM or Microsoft Windows, then couldn't the affected sue Sony or Microsoft? This would include non-users of these products whose internet usage was disrupted. And as someone who does NOT use DRMed Sony CDs or Microsoft Windows, I have NOT agreed to these company's EULAs with all their legalese of limited liability. Thus non-users may have more rights to sue than users of these products.
IANAL. Any thoughts?
Infected with DRM (Score:5, Interesting)
"Infected with DRM"
Sony's rootkit has also been linked to Windows crashes, which isn't surprising to me. Most spyware causes instability in Windows because it is poorly written and designed to break parts of Windows to protect itself from removal. Sony writes, "This component is not malicious and does not compromise security. However to alleviate any concerns that users may have about the program posing potential security vulnerabilities, this update has been released to enable users to remove this component from their computers."
The incongruence of their words, is not startling to me, as they are playing a PR game to hide the fact that they messed up people's computers, and made them vulnerable to an attack that hasn't gained popularity yet, but now surely will. Virus writers will be able to easily hide their virus files using programs like Sony's cloaking DRM. Sony is lying that their cloaking DRM does not compromise security of an infected computer.
http://www.informationweek.com/story/showArticle.
Re:A Natural Rights perspective (Score:3, Interesting)
For example, I own the world. So I can go anywhere I please, including into 'your' home which is really mine.
You might suggest that the state decides who owns what, and the state says you own your home. But if so, then they also have the power to decide what the limits on that ownership are, including the powers of copyright.
If you rely on the force of the state to create property rights, then you pretty much have to go along with the whole legal system in determining who has what assorted rights. The state has decided that copyright and property rights are both to exist, and that it will offer to use its force in defending those rights in certain ways. You can live with the legal system, or you can work with others to change it, or you can resist it (though your odds of doing that effectively seem quite low).
Comment removed (Score:3, Interesting)
Re:Back again to Windows Security (Score:3, Interesting)
Trey Anastasio, Shine (Columbia)
Celine Dion, On ne Change Pas (Epic)
Neil Diamond, 12 Songs (Columbia)
Our Lady Peace, Healthy in Paranoid Times (Columbia)
Chris Botti, To Love Again (Columbia)
Van Zant, Get Right with the Man (Columbia)
Switchfoot, Nothing is Sound (Columbia)
The Coral, The Invisible Invasion (Columbia)
Acceptance, Phantoms (Columbia)
Susie Suh, Susie Suh (Epic)
Amerie, Touch (Columbia)
Life of Agony, Broken Valley (Epic)
Horace Silver Quintet, Silver's Blue (Epic Legacy)
Gerry Mulligan, Jeru (Columbia Legacy)
Dexter Gordon, Manhattan Symphonie (Columbia Legacy)
The Bad Plus, Suspicious Activity (Columbia)
The Dead 60s, The Dead 60s (Epic)
Dion, The Essential Dion (Columbia Legacy)
Natasha Bedingfield, Unwritten (Epic)
Re:A Natural Rights perspective (Score:1, Interesting)
Property rights are hardly on pair with freedom and the right to live. Even the very notion of "property" is problematic.
One great force behind this right is that past acts bear no allowances for future acts. If I let you into my house yesterday, you have no right to be here today. I may contractually allow you to come and go as you please, but I have to willfully sign the contract with witnesses noting the act.
Here you even contradict yourself, seeming unnoticed. The fact that you can contractually give up this "right" demonstrates that it's fundamentally different from the right to live or to be free.
Sony's DRM uses government force (through copyright provisions) to settle its legality. They say that by using their property, you have to permanently give up your natural right to private property (free speech Statists wrongfully call it Right to Privacy). Sony is wrong.
This is nonsense. Sony is wrong here because they install illegal things on your computer without telling you, breaking several laws in the process, not because they are violating some fundamental natural right.
By violating numerous natural rights, Sony has opened itself to a demand for restitution. I wholeheartedly believe that corporate protections are wrong, as is copyright. My solution? Go after Sony through the shareholders directly (they own the business and allowed the breach of a basic human right). Demand restitution for the trojan if you receive it.
This is the kind of high-brow crap that gives Slashdot advocates a bad rep. If you go up to Sony shareholders and tell them they are violating human rights, not only will they laugh you in the face, but so will the media. Let's at least try to keep things in perspective here, shall we? Sony are installing stuff on your computer without your consent, not forcing children into prostitution.
I think Sony made a mess here as well, but post like yours pisses me off even more. You people need to go outside or read the freaking newspaper once in a while. DRM protection gone awry is bad, but it isn't the end of the world either.
Re:On what platforms does Sony DRM rootkit work? (Score:4, Interesting)
I'm thinking that outside of users that habitually surf and/or listen to music as root, that Linux and OS X users should be just a wee bit safer than the casual Windows user.
Sure, Linux can be rooted. Now, your homework assignment is to go burn me a disk with music on it that will root my Linux box merely by being inserted, and won't let me listen to the music until my box has been rooted. I like classical.
Re:Jobseekers rejoice! (Score:5, Interesting)
If I'm working for a homicidal maniac and I build a gun for him, I'm not innocent when he goes on a rampage.
Werner Heisenberg claims that he sabotaged the Nazi atomic bomb effort. If that's true, this would have been a very different world if he had just decided to be a "good engineer." (Yes, Godwin, blah blah. I don't think it applies.)
Re:Back again to Windows Security (Score:5, Interesting)
Re:Infected with DRM (Score:2, Interesting)
A variant of that trojan ... (Score:5, Interesting)
So posing as the trojan I logged onto the IRC channel. I idled there for a while watching the channel op send commands to the connected bots, and decided to have a go myself. The channel was +m but I could PRIVMSG the bots, and a bit more work in IDA revealed the command set - which contained an unload command. So I scripted my irc client to send a msg to every non-op in the channel with the command
"OH SHIT" he typed. He was more shocked than anything, and then more curious than angry. We ended up having a rather long and interesting conversation about our respective jobs. He told about his bot network, what he uses them for (in the UK it's for harvesting email addresses, apparently), the ££ he gets for it - it's a full time job for him - and who writes most of the bot software (his partner.) He was no stereotypical teenage script kiddie either, more a computer professional turned to the 'dark side' of IT
All in all, it was fascinating. (Btw, our firewall blocked the trojan from connecting to IRC and it was fairly easily to remove from the sales manager's laptop)
Major event (Score:2, Interesting)
All their heavy public relations work to portray the reluctant consumers as merely "pirates" is on for a trying test.
antivirus vendors violate DMCA? (Score:5, Interesting)
Re:Jobseekers rejoice! (Score:3, Interesting)
I was recently called up by a pimp (consultancy agent) and he asked if there was any company I wouldn't want to work for. I said anyone connected directly with the defence industry and he told me that I'd be surprised how many people also said that.
As far as I'm concerned, if I write software for a guided missile for example, and that missile happens to kill innocent civilians (even if by mistake) then I feel like there'd be at least some blood on my hands too - which I don't want.
Bob
Remember Intuit's TurboTax debacle? (Score:5, Interesting)
The following year, all traces of this were removed in the next version and, afaik, it has never returned. I, for one, however, haven't bought their product since and don't plan to ever buy from them again.
I guess Sony just wasn't paying attention.
Re:antivirus vendors violate DMCA? (Score:4, Interesting)
See below:
http://www.betanews.com/article/Antivirus_Firms_T
Re:Jobseekers rejoice! (Score:2, Interesting)
Re:Jobseekers rejoice! (Score:3, Interesting)
Re:Jobseekers rejoice! (Score:3, Interesting)
The ethical questions themselves never get raised. Partially, it may because ethics are seen as outside rationality.
Re:Jobseekers rejoice! (Score:2, Interesting)
But in this case, I would bet that this 'product' was made by said 3rd parties with this in mind - to sell it to Sony or whoever and that they went to Sony, not that Sony found them. So here the 3rd party programmers share responsibility with The Man at Sony, but vast bulk of responsibility goes with those who at the helm that make the choices.
This is the problem I have with large corps (american or otherwise) that choose to do these things. If you are management, and making those choices, then you must bear 80-90% of the responsibility. Even if your subordinates did help you do such a thing, you are the most to blame. The man who runs the drug cartel is more to blame for the drug problem then the drug dealer or drug user (ha, thats probably just as close to Godwin as I need to be, heh).
Re:Fun with $sys$ (Score:4, Interesting)
Probably. Since the Sony Rootkit is the big story at the moment, this thread will get read by a lot of people. That post went to +5, and it's got Slashdot memeicity all over it.
I wouldn't use it as a straight drop-in replacement for ^H^H^H, though; that merely implies 'I nearly wrote this - whoops!' $sys$ conveys malevolence. So, for instance, if someone were to write
We must invade Iraq to look for oil^H^H^HWMD
would suggest that oil is at least part of the purpose of the invasion, and that it's just not diplomatic to mention it. A careless typo that reveals too much of what you're thinking. On the other hand
We must invade Iraq to look for $sys$oil WMD
would suggest that oil is the real purpose of the invasion, and that this is being deliberately hidden by a lot of bullshit about WMD. A subtext deliberately trojaned in and kept dark.
Use the $sys$ prefix in place of ^H^H^H to lend a nastier, more malevolent tone to what it is you're editing out.
Definition of "Natrual Rights" (Score:3, Interesting)
natural right(n): A political condition required for the life of a morally autonomous being.
A natural right, in this view, is to political or social life what the requrirement for food, water or air is to physical life. I cannot say, "I relenquish my need for food" in any meaningful sense, because it is my nature to need food to live.
Likewise, for a being whose mode of life involves making and acting on its own value judgements, certain political conditions are required. The need for these political conditions cannot be relenquished.
"Tyranny" is a political condition, as is "republic", "police state", etc. Not all of these political conditions allow morally autonomous beings to live as such.
Note that I do not believe that natural rights theory is sufficient to construct a theory of society. Nor do I believe that protection of natural rights is a sufficient basis for a just society. Humans are more than rights-bearing creatures, and our social needs are far more complex than the needs described by natural rights. A natural-rights-only society is the bread-and-water diet of social theory: sufficient to sustain some kind of existence, but not sufficient for genuine health and happiness.