August 28, 2007

Quick heads up - Sony USB 'Thumb Drives'

From BetaNews:
Sony USB Drives Pack Rootkit Surprise
Finnish security company F-Secure has reported on new rootkit-like software discovered on USB thumb drives manufactured by Sony. Although the software doesn't appear to cause damage to a user's system, it does create a hidden directory that is inaccessible via the Windows API and some virus scanners.

The product in question is Sony's MicroVault USM-F fingerprint reader software, included with the company's USB drives. Sony was widely derided in 2005 for bundling copy-protection software on its music CDs that utilized rootkit-like functionality. "It is our belief that the MicroVault software hides this folder to somehow protect the fingerprint authentication from tampering and bypass," says F-Secure. "However, we feel that rootkit-like cloaking techniques are not the right way to go here." The company contacted Sony about the issue, but received no response.
Rootkits can be used for good and for evil. In this case, the people at Sony thought that it would add a layer of security. The issue is that now that people are clued into Rootkits, there are now some very good tools to find them including Rootkit Revealer written by Bryce Cogswell and Mark Russinovich who are currently on Microsoft's payroll... Rootkits seriously jumped the shark about two years ago and any attempt to use them now, for a new product from a big corporation are FUCKING LAME! Shame on you Sony! Posted by DaveH at August 28, 2007 11:04 PM
Comments
Post a comment









Remember personal info?