Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-15 Thread Raymond Horton
Don't tell me/us - tell Brian Krebs at the Washington Post. David W. Fenton wrote: On 15 Nov 2005 at 10:38, Raymond Horton wrote: (forwarded) WASHINGTON POST.COM SECURITY FIX Brian Krebs on Computer Security More Sony Problems to Be Revealed []

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-15 Thread David W. Fenton
On 15 Nov 2005 at 10:38, Raymond Horton wrote: > WASHINGTON POST.COM > SECURITY FIX > Brian Krebs on Computer Security > More Sony Problems to Be Revealed [] > Imagine the potential consequences of military personnel or government > employees at work on a sensitive governm

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-15 Thread Raymond Horton
WASHINGTON POST.COM SECURITY FIX Brian Krebs on Computer Security More Sony Problems to Be Revealed Several groups of privacy and security experts are expected to release research later today that points to multiple, serious security flaws present in "*XCP*," the ant

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-13 Thread dhbailey
Lora Crighton wrote: [snip]> I do alot of my CD listening at the computer, and I will certainly think twice before I buy another Sony CD. In order to have any effect in the marketplace, you need to tell Sony about your decision, don't just tell your friends. -- David H. Bailey [EMAIL PROTE

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-12 Thread BC2
Sony drops antipiracy technology from its CDs Ted Bridis, Associated Press November 12, 2005 WASHINGTON - Stung by continuing criticism, the world's second-largest music label, Sony BMG Music Entertainment, promised Friday to temporarily suspend making music CDs with antipiracy technology that

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-12 Thread Lora Crighton
On 11/11/05, David W. Fenton <[EMAIL PROTECTED]> wrote: On 11 Nov 2005 at 12:47, Robert Patterson wrote:> Christopher Smith wrote:>> > I would sue if > > something like this was installed on my computer by a so-called> > reputable company.>> As much as I agree with the sentiment, I suspect anyone

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread David W. Fenton
On 11 Nov 2005 at 12:47, Robert Patterson wrote: > Christopher Smith wrote: > > > I would sue if > > something like this was installed on my computer by a so-called > > reputable company. > > As much as I agree with the sentiment, I suspect anyone who is > infected with this thing clicked thru

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread David W. Fenton
On 11 Nov 2005 at 6:15, Brad Beyenhof wrote: > On 11/11/05, Phil Daley <[EMAIL PROTECTED]> wrote: > > Sony has an "uninstaller" available on a web site somewhere. > > That "uninstaller" does not remove the rootkit in its entirety, it > just disables the $sys$ file hiding (which has already been e

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread David W. Fenton
On 11 Nov 2005 at 6:13, Brad Beyenhof wrote: > On 11/11/05, Phil Daley <[EMAIL PROTECTED]> wrote: > > At 11/10/2005 08:43 PM, David W. Fenton wrote: > > > >> One of the things it does is hook into low-level file I/O > >> subroutines to hide its own files and its own activities. This is > >> accomp

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread David W. Fenton
On 11 Nov 2005 at 8:42, Phil Daley wrote: > At 11/11/2005 08:20 AM, Christopher Smith wrote: > > >In response to someone who said it WAS removable, my understanding > is >that removing it disables your CD drive. I don't know enough > about PCs >to comment, but a pretty smart guy (Mark Russinov

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread David W. Fenton
On 11 Nov 2005 at 6:56, Phil Daley wrote: > At 11/10/2005 08:21 PM, John Howell wrote: > > >OK, esteemed computer gurus: urban legend, spam or confirmed > terrorism? > > Confirmed, it is even on radio and TV news. > > But, again, it is removable. This is ridiculous. It is *extremely difficu

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Robert Patterson
Christopher Smith wrote: I would sue if something like this was installed on my computer by a so-called reputable company. As much as I agree with the sentiment, I suspect anyone who is infected with this thing clicked thru a license agreement that allowed Sony to install their software

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Christopher Smith
On Nov 11, 2005, at 8:42 AM, Phil Daley wrote: At 11/11/2005 08:20 AM, Christopher Smith wrote: >In response to someone who said it WAS removable, my understanding is >that removing it disables your CD drive. I don't know enough about PCs >to comment, but a pretty smart guy (Mark Russinovich)

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Brad Beyenhof
On 11/11/05, Phil Daley <[EMAIL PROTECTED]> wrote: > Sony has an "uninstaller" available on a web site somewhere. That "uninstaller" does not remove the rootkit in its entirety, it just disables the $sys$ file hiding (which has already been exploited in a new Trojan that just came out). -- Brad B

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Brad Beyenhof
On 11/11/05, Phil Daley <[EMAIL PROTECTED]> wrote: > At 11/10/2005 08:43 PM, David W. Fenton wrote: > >> One of the things it does is hook into low-level file I/O subroutines >> to hide its own files and its own activities. This is accomplished by >> hiding every file/directory that begins with $sy

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Phil Daley
At 11/11/2005 08:20 AM, Christopher Smith wrote: >In response to someone who said it WAS removable, my understanding is >that removing it disables your CD drive. I don't know enough about PCs >to comment, but a pretty smart guy (Mark Russinovich) with some >sophisticated tools, some of which he w

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Christopher Smith
On Nov 11, 2005, at 6:59 AM, dhbailey wrote: Christopher Smith wrote: [snip]> I'm glad (for now!) that I'm unaffected by this. Of course, at any time that may change... [snip] One thing I have NOT seen in all these discussions is a list of the CDs that had that awful stuff on them, so we c

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread dhbailey
Christopher Smith wrote: [snip]> I'm glad (for now!) that I'm unaffected by this. Of course, at any time that may change... [snip] One thing I have NOT seen in all these discussions is a list of the CDs that had that awful stuff on them, so we can avoid purchasing them and if we already own

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Phil Daley
At 11/10/2005 08:43 PM, David W. Fenton wrote: >One of the things it does is hook into low-level file I/O subroutines >to hide its own files and its own activities. This is accomplished by >hiding every file/directory that begins with $sys$ (or a similar such >pattern -- I could be misremembering

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Phil Daley
At 11/10/2005 08:21 PM, John Howell wrote: >OK, esteemed computer gurus: urban legend, spam or confirmed terrorism? Confirmed, it is even on radio and TV news. But, again, it is removable. Phil Daley < AutoDesk > http://www.conknet.com/~p_daley

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Phil Daley
At 11/10/2005 08:03 PM, Gerhard Torges, geb. Hölscher wrote:   >When one of these CDs is put into the computer's CD or DVD drive, it  >installs software that > >- hides itself from the user >- opens backdoors enabling the PC to be controlled from the internet >- submits infos on played CDs (and m

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-11 Thread Darcy James Argue
On 10 Nov 2005, at 8:58 PM, Brad Beyenhof wrote: On 11/10/05, Robert Patterson <[EMAIL PROTECTED]> wrote: Mac users (as with a previous CD/CP scheme) are immune. Not completely true: http://digg.com/apple/Sony_Music_CDs_infect_Macs,_too_ It's not as invasive or as automatic, but there is DRM

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread Christopher Smith
On Nov 10, 2005, at 8:26 PM, Raymond Horton wrote: Once the true nature of the Sony BMG software tactic became public, the company wasted no time in attempting to defuse the issue. Within 48 hours, it released a patch that makes its software visible again; you can download it from http://cp.s

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread Brad Beyenhof
On 11/10/05, Robert Patterson <[EMAIL PROTECTED]> wrote: > Mac users (as with a previous CD/CP scheme) are immune. Not completely true: http://digg.com/apple/Sony_Music_CDs_infect_Macs,_too_ It's not as invasive or as automatic, but there is DRM software on Sony CDs for Macs as well. -- Brad Bey

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread Gerhard Torges, geb. Hölscher
Am 11.11.2005 um 02:36 schrieb Robert Patterson: Today msnbc.com has a front-page article about it. See here: Viruses exploit Sony CD anti-piracy scheme Hackers use copy-protection software to hide in PCs SAN JOSE, Calif. - A controversial copy-protect

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread Gerhard Torges, geb. Hölscher
Hi! Am 11.11.2005 um 02:21 schrieb John Howell: Sony BMG and their subsidary record labels [1] have released a couple of music CDs that contain malicious software claiming to simply be a copy protection system called "XPC". But it's worse. Far worse. OK, esteemed computer gurus: urban lege

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread David W. Fenton
^On 10 Nov 2005 at 20:21, John Howell wrote: > OK, esteemed computer gurus: urban legend, spam or confirmed > terrorism? It's unquestionably real. And it's very dangerous. One of the things it does is hook into low-level file I/O subroutines to hide its own files and its own activities. This

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread Robert Patterson
Unfortunately, all too real. This IS NOT A HOAX. Today msnbc.com has a front-page article about it. There are also relevant articles at eff.org and others. FWIW: You can safeguard your Windows machine by disabling Autorun. A number of website will show you the registry key to modify. Mac us

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread Dennis Bathory-Kitsz
At 08:21 PM 11/10/05 -0500, John Howell wrote: >OK, esteemed computer gurus: urban legend, spam or confirmed terrorism? Absolutely true. I hope it's a nightmare for Sony, who deserves every lawsuit that comes their way. Reading for the evening: http://www.sysinternals.com/blog/2005/10/sony-rootk

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread Raymond Horton
This is heavily offtopic on this list but I couldn't stand to let anyone here get into the pitfall which would be even more serious to anyone using his/her PC for business. Sony BMG and their subsidary record labels [1] have released a couple of music CDs that contain malicious software c

Re: [Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread John Howell
At 2:03 AM +0100 11/11/05, " Gerhard Torges, geb. Hölscher " wrote: Hello! This is heavily offtopic on this list but I couldn't stand to let anyone here get into the pitfall which would be even more serious to anyone using his/her PC for business. Sony BMG and their subsidary record labels

[Finale] OT: Windows users BEWARE of Sony BMG music CD's!

2005-11-10 Thread Gerhard Torges, geb. Hölscher
Hello! This is heavily offtopic on this list but I couldn't stand to let anyone here get into the pitfall which would be even more serious to anyone using his/her PC for business. Sony BMG and their subsidary record labels [1] have released a couple of music CDs that contain malicious sof