Sunday, November 20, 2005

Sony Music CD Malware/Spyware

The story is something you'd expect to hear of with a criminal case at the end.

Sony music CDs load a spyware root kit on you Windows PC if you play the CD there. The Spyware calls home and leaves your IP address there. They code also hides itself and can't be removed with out destroying your system.

Someone finds that spyware, and informs the public. Sony says it's not something to get upset about. Then they offer a "fix" that doesn't remove the spyware. They then offer a "fix" that leaves a huge gap in your systems security.

Oh, worst of all, your anti-virus software won't detect the problem.

Now, the question is, will anyone at Sony be seeing jail time for violating the cybercrime laws that are on the books?

Go read the blog at Schneier for yourself. He points out many things that the press in general has ignored.


No comments: