IT security
Worm authors could exploit the Sony feature to hide malicious applications

Sony rapped over music CD rootkit

Record label backtracks after public outrage over cloaking technology

Written by Tom Sanders in California

Sony has released a patch for a music CD anti-piracy technology after security experts warned that it represents a potential security risk. 

The copyright protection software would automatically install when a consumer inserted a music CD with the XCP digital rights management technology in their computers.

The software is designed to limit the number of copies that users can make of the CD and restrict ripping of the disk.

Software developer Mark Russinovich, of Sysinternals, reported on Monday that he had detected a secretly installed rootkit on his system. 

Russinovich traced the software back to Sony and the XCP technology back to First 4 Internet, an English software developer. 

The rootkit served to hide the digital rights management technology from the user as well as the system itself, including from antivirus software. When Russinovich tried to remove the application, he found that his CD drive was disabled.

Sony uses the rootkit to prevent the user from removing the copyright protection technology and violating Sony's copyright. But worm authors could exploit this feature to hide malicious applications.

The patch will remove the cloaking capability of the software to enable users to remove the Sony tool. But this will render their systems incapable of playing the CD.

Tags:

Further reading

Rootkit creators turn professional

Dodging the virus shield becomes big business as authors 'outsource' malware creation   More...

Worm turns on AOL chat service

Talk is not cheap   More...

Microsoft bangs the privacy DRM

Document-level digital rights management in the pipeline   More...

Microsoft and Philips seal DRM alliance

Integration of Media player and Nexperia semiconductors   More...

Related articles

Sony caught playing with rootkits again

Repeat of hidden folders offering a malware hiding place   More...

Sony halts production of rootkit USB sticks

Investigating security concerns   More...

Hackers step up website attacks

Security forecast for 2008 makes grim reading   More...

Sony plans fix for 'rootkit' USB sticks

Patch promised later this month   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement