full-disclosure - the "Sony/BMG" virus

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri Nov 11 14:24:48 2005
From: toddtowles at brookshires.com (Todd Towles)
Subject: the "Sony/BMG" virus

Ferg, but that isn't the same rootkit-type technology being used on the
Windows Side. That isn't even XCP, I don't think. It is the other
copy-protection used by Sony -  Suncomm

Not surprised it installs stuff...but it isn't hiding, is it? Can you
remove it without killing your mac?

> -----Original Message-----
> From: full-disclosure-bounces@...ts.grok.org.uk 
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Fergie
> Sent: Friday, November 11, 2005 8:10 AM
> To: michael.holstein@...ohio.edu
> Cc: full-disclosure@...ts.grok.org.uk
> Subject: Re: [Full-disclosure] the "Sony/BMG" virus
> 
> Not keeping up with the media blitz on this one? ;-)
> 
> Insofar as [just] yesterday's RootkitGate media blitz, let's review:
> 
> [1] Hackers use Sony DRM software to hide Trojan
> 
> http://fergdawg.blogspot.com/2005/11/hackers-use-sony-drm-soft
> ware-to-hide.html
> 
> [2] Sophos develops Sony DRM removal tool
> 
> http://fergdawg.blogspot.com/2005/11/sophos-develops-sony-drm-
> removal-tool.html
> 
> [3] California Sues Sony over DRM Rootkit
> 
> http://fergdawg.blogspot.com/2005/11/california-sues-sony-over
> -drm-rootkit.html
> 
> [4] EFF: Want to particpate in Sony lawsuit?
> 
> http://fergdawg.blogspot.com/2005/11/eff-want-to-particpate-in
> -sony-lawsuit.html
> 
> [5] Sony DRM CDs infect Macs, too
> 
> http://fergdawg.blogspot.com/2005/11/sony-drm-cds-infect-macs-too.html
> 
> Enjoy.
> 
> - ferg
> 
> 
> -- Michael Holstein <michael.holstein@...ohio.edu> wrote:
> 
> This didn't take long ...
> 
> http://www.cnn.com/2005/TECH/internet/11/10/sony.hack.reut/index.html
> 
> I would dearly love to see large groups of affected parties 
> join a separate class-action lawsuit against Sony, BMG, and 
> First4 for their roles in a whole new round of rootkit-enabled worms.
> 
> ~Mike.
> 
> 
> --
> "Fergie", a.k.a. Paul Ferguson
>  Engineering Architecture for the Internet  
> fergdawg@...zero.net or fergdawg@...global.net  ferg's tech 
> blog: http://fergdawg.blogspot.com/
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>