bugtraq - RE: Caveat Lector: Beastie Boys Evil

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 17 Jun 2004 11:30:09 -0700
From: "Wolf, Glenn" <glenn.wolf@...inc.com>
To: bugtraq@...urityfocus.com
Cc: dr@....net
Subject: RE: Caveat Lector: Beastie Boys Evil

If I recall, it is possible to disable the offending "bonus" data track by
writing over it with a black marker.  This is all in theory, of course.

http://www.wired.com/news/technology/0,1282,52665,00.html

Glenn

-----Original Message-----
From: Dragos Ruiu [mailto:dr@....net] 
Sent: Wednesday, June 16, 2004 1:10 AM
To: bugtraq@...urityfocus.com
Subject: Caveat Lector: Beastie Boys Evil

Well I truly regret actually purchasing a copy of the new Beastie Boys album
to support them.

It seems that Capitol Records has some sort of new copy protection system,
that automatically, silently, installs "helpful" copy protection software on

MacOS and Windows as soon as you insert the CD into default systems.
I'm not sure exactly what it does yet, but I am sure regreting actually
purchasing said media now... they don't deserve my money if they choose
to pull stupid stunts like this. Installing software without your permission
sounds like viral malware behaviour to me. I certainly hope the AV companies
put signatures into their products for this crap.

They include some sort of uninstaller buried on there for Windows, but 
I see no such thing for MacOS. If anyone has disassembled the
aforementioned malware already and can save us some time with 
instructions on how to remove it... thanks in advance.

caveat emptor,
--dr

-- 
World Security Pros. Cutting Edge Training, Tools, and Techniques
Tokyo, Japan	Nov 11-12 2004  http://pacsec.jp
pgpkey http://dragos.com/ kyxpgp