Sony’s Memory Sticks Install Rootkit Software - Experts

zippyjuan · 08-28-2007, 12:07 PM

http://www.xbitlabs.com/news/other/d...828062824.html

Quote:

Sony Accused of Spreading Controversial Software Again.
Sony’s Memory Sticks Install Rootkit Software - Experts

Category: Other

by Anton Shilov

[ 08/28/2007 | 06:30 AM ]

Sony Corp. on Monday again faced critics for usage of software that embeds itself into operating system and poses security threats. Apparently, Sony’s flash memory drives software hided certain data related to fingerprint authentication process in a directory that could not be accessed by anti-virus software or end-user using typical interfaces, but could be accessed by anyone using command prompt.

According to a report from F-Secure, a leading developer of antivirus and security software for personal computers, Sony’s MicroVault USM-F lineup of flash drives come with software that creates and hides a directory under “c:\windows\”, which cannot be accessed by the end-user, some antivirus software, but can be accessed either by Sony or people who know about the software and have intentions to harm a computer system.

“It is our belief that the MicroVault software hides this folder to somehow protect the fingerprint authentication from tampering and bypass. It is obvious that user fingerprints cannot be in a world writable file on the disk when we are talking about secure authentication. However, we feel that rootkit-like cloaking techniques are not the right way to go here,” said Mika Tolvanen of F-Secure in a posting to the company’s blog.

The antivirus software company noted that Sony used the method of creating of a hidden folder back in 2005, when the XPC digital right management software was criticized for being a malware.

F-Secure contacted Sony before publishing the information regarding the vulnerability of its flash drives and dangers that they pose to customers. However, Sony decided not to comment on the information.

Maarchk · 08-28-2007, 02:54 PM

Quote:

Sony’s flash memory drives software hided certain data related to fingerprint

Dictionary:
Hided - to skin an animal.

Perhaps they meant hid? I'm not a grammar nazi but words that don't make sense usually crack me up when they are in a news article. Yahoo makes tons of these mistakes and i actually try not to read their articles because of it.

Anyways, this is still shady and kind of scary? But then again, what kind of viruses could they unleash on your PSP? I imagine they might try to weed out people who play illegal copies of games but thats still a bit suspicious i think. Who knows... The more we think we are in control, usually the less true that statement is.
Macs and Windows have both been known to phone home without consent so i see this as par for the course.

ray · 08-28-2007, 06:22 PM

people still use sony memory sticks?

Thesifer · 08-28-2007, 11:40 PM

I like SanDisk!

Sony ist tha Debil.

Chgoman · 08-29-2007, 08:44 AM

You'd think Sony would have learned from the last time...

Maarchk · 08-29-2007, 09:46 AM

Quote:

Originally Posted by ray

people still use sony memory sticks?

Thats how you save and transfer game saves for PSP. And thats how people hack them and download games.

08-28-2007, 11:40 PM	#4
Thesifer Vice Admiral Join Date: Jun 2003 Location: Oklahoma Posts: 4,338	I like SanDisk! Sony ist tha Debil. __________________

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

08-28-2007, 06:22 PM	#3
ray captain awesome Join Date: Jan 2003 Posts: 7,054	people still use sony memory sticks?

08-29-2007, 08:44 AM	#5
Chgoman Lieutenant Commander Join Date: Apr 2002 Location: Mission Viejo, CA Posts: 696	You'd think Sony would have learned from the last time...

User Name
Password
Remember Me?