Sony rootkit may be more dangerous on the way out

Powered by SC Magazine
 

Uninstalling Sony-BMG Entertainment’s spyware-like application from a PC could be more harmful than having downloaded it in the first place, a Princeton University professor warned on Tuesday.

"For affected users, this represents a far greater security risk than even the Sony rootkit," said Ed Felten, a professor of computer science at the Ivy League university and author of the weblog "Freedom to Tinker."

Felten warned that the rootkit remover allows any website to run code onto a PC and take command of it.

"Any web page can seize control of your computer; then it can do anything it likes," Felten wrote on his blog. "That's about as serious a security flaw as you can get."

The uninstaller downloads a program onto PCs called CodeSupport, which remains on a unit after a user leaves Sony's site. The program is labeled as "safe for scripting," Felten contends, so a site can download code onto a PC – without user permission – by using it.

Sony had said earlier this week that it would withdraw the rootkit application from CD-Roms. A media firestorm erupted after Windows security expert Mark Russinovich first reported on the application's existence on his blog late last month.

A number of viruses, which exploited the cloaking code to download software onto PCs, appeared in the weeks following the disclosure. Meanwhile, USA Today has reported that Sony has agreed to pull CDs containing the application from stores and offer exchanges to customers who bought CD-Roms containing the rootkit.

www.sony.com
www.freedomtotinker.com
www.sysinternals.com

Copyright © SC Magazine, US edition


 
 
 
Top Stories
The True Cost of BYOD - 2014 survey
Twelve months on from our first study, is BYOD a better proposition?
 
Photos: Unboxing the Magnus supercomputer
Pawsey's biggest beast slots into place.
 
ANZ looks to life beyond the transaction
If digital disruptors think an online payments startup could rock the big four, they’ve missed the point of why people use banks, says Patrick Maes.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
What is delaying adoption of public cloud in your organisation?







   |   View results
Lock-in concerns
  29%
 
Application integration concerns
  3%
 
Security and compliance concerns
  28%
 
Unreliable network infrastructure
  9%
 
Data sovereignty concerns
  21%
 
Lack of stakeholder support
  3%
 
Protecting on-premise IT jobs
  4%
 
Difficulty transitioning CapEx budget into OpEx
  3%
TOTAL VOTES: 1071

Vote