Sony rootkit may be more dangerous on the way out

Powered by SC Magazine
 

Uninstalling Sony-BMG Entertainment’s spyware-like application from a PC could be more harmful than having downloaded it in the first place, a Princeton University professor warned on Tuesday.

"For affected users, this represents a far greater security risk than even the Sony rootkit," said Ed Felten, a professor of computer science at the Ivy League university and author of the weblog "Freedom to Tinker."

Felten warned that the rootkit remover allows any website to run code onto a PC and take command of it.

"Any web page can seize control of your computer; then it can do anything it likes," Felten wrote on his blog. "That's about as serious a security flaw as you can get."

The uninstaller downloads a program onto PCs called CodeSupport, which remains on a unit after a user leaves Sony's site. The program is labeled as "safe for scripting," Felten contends, so a site can download code onto a PC – without user permission – by using it.

Sony had said earlier this week that it would withdraw the rootkit application from CD-Roms. A media firestorm erupted after Windows security expert Mark Russinovich first reported on the application's existence on his blog late last month.

A number of viruses, which exploited the cloaking code to download software onto PCs, appeared in the weeks following the disclosure. Meanwhile, USA Today has reported that Sony has agreed to pull CDs containing the application from stores and offer exchanges to customers who bought CD-Roms containing the rootkit.

www.sony.com
www.freedomtotinker.com
www.sysinternals.com

Copyright © SC Magazine, US edition


 
 
 
Top Stories
Parliament passes law to let ASIO tap entire internet
Greens effort to limit devices fails.
 
Business-focused Windows 10 brings back the Start menu
Microsoft skips 9 for the "greatest enterprise platform ever".
 
Feeling Shellshocked?
Stay up to date with patching for the Bash bug.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  66%
 
Advanced persistent threats
  5%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  12%
TOTAL VOTES: 1384

Vote