bugtraq - Re: Sony: The Return Of The Rootkit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <293153.607841188600037343.JavaMail.juha-matti.laurio@netti.fi>
Date: Sat, 1 Sep 2007 01:40:36 +0300 (EEST)
From: Juha-Matti Laurio <juha-matti.laurio@...ti.fi>
To: Paul Sebastian Ziegler <psz@...erved.de>,
	Quark IT - Hilton Travis <Hilton@...rkIT.com.au>,
	bugtraq@...urityfocus.com
Subject: Re: Sony: The Return Of The Rootkit

According to Mikko Hyppönen's post to F-Secure's blog Sony Electronics has confirmed that they received the research report this week:
http://www.f-secure.com/weblog/archives/archive-082007.html#00001266

The post says that companies have opened direct discussion channels and Sony will receive the  internal technical report of the case.

Maybe we will see an official response document from Sony later.

- Juha-Matti

Paul Sebastian Ziegler <psz@...erved.de> wrote: 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> Quark IT - Hilton Travis schrieb:
> > Hi All,
> >
> > Apparently Sony cannot learn from their past and have introduced another
> > rootkit with another of their devices.  This time it is their Microvault
> > USB drive that has fingerprint security.
> 
> That is not exactly new news.
> 
> The devices are old and all that is "rootkit-like" about them is the
> fact that they interact with the kernel in order to hide their own files
> from corruption.
> 
> Not everything that interacts with the kernel is a rootkit. Or would
> anyone want to classify GRSecurity as a rootkit? RBAC will let you hide
> parts of your filesystem as well...
> 
> > Have a read of
> 
> Have another one:
> http://observed.de/?entnum=101
> 
> Now I was outraged by Sony's Copyprotection Rootkit - but this is simply
> something different.
> 
> Many Greetings
> Paul
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFG1uvsaHrXRd80sY8RCvegAJ9C8GDeUIi5maRExcLnjdV4w3pCLACg8iDU
> pM7XA3bdpQ81EMytNaMBre0=
> =yk5I
> -----END PGP SIGNATURE-----