Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

US considers banning DRM rootkits
ProPC ^ | 2/20/06 | Simon Aughton

Posted on 02/20/2006 12:14:33 PM PST by mathprof

US government officials are considering introducing legislation if companies continue to distribute copy-protection measures that compromise computer security.

The Department of Homeland Security's Border and Transportation Security Directorate warning followed the discovery last year that Sony BMG employed two different types of digital rights management (DRM) on music CDS sold in the US and both installed rootkit software on PCs that made them vulnerable.

'We need to think about how that situation could have been avoided in the first place,' said

Jonathan Frenkel at the RSA computer security conference. 'Legislation or regulation may not be appropriate in all cases, but it may be warranted in some circumstances.'

Department of Homeland Security (DHS) officials met with Sony BMG after the security breach was discovered and delivered what Frenkel described as a 'forceful' message to the record company.

Although it has no power to implement new rules the DHS is said to have the ears of legislators.

Sony has begun compensating customers who inadvertently installed the rootkit by inserting the affected CDs into PCs. However the swathes of bad publicity that it received over the whole affair have not deterred others. F-Secure reports that German DVD of the Mr & Mrs Smith movie starring Brad Pitt and Angelina Jolie contains the Settec Alpha-DISC system that installs a user-mode rootkit.


TOPICS: Culture/Society; Extended News; Government; Miscellaneous; News/Current Events
KEYWORDS: privacy; rootkits; sony
Navigation: use the links below to view more comments.
first 1-2021-4041-45 next last
Rootkits are pretty evil. They allow Sony (or hackers) to make changes to your system that are almost impossible to detect. Antivirus programs can't see them. They are far worse than Spyware. I hope congress does make them illegal.
1 posted on 02/20/2006 12:14:34 PM PST by mathprof
[ Post Reply | Private Reply | View Replies]

To: mathprof

I would want a brand new computer, to start.


2 posted on 02/20/2006 12:19:10 PM PST by elephant
[ Post Reply | Private Reply | To 1 | View Replies]

To: mathprof

I fail to understand why Sony's actions weren't already massively illegal under existing law. Kevin Mitnick was thrown in prison for less.


3 posted on 02/20/2006 12:21:00 PM PST by ThinkDifferent (Chloe rocks)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mathprof

IF YOU KNOW WHAT YOU ARE DOING ... here is good info and a free tool -

http://www.sysinternals.com/Utilities/RootkitRevealer.html

Read what the page says - if you don't understand it ... DON'T mess with it. You can easily damage your system to the point where you need a complete re-install.


4 posted on 02/20/2006 12:22:20 PM PST by RS ("I took the drugs because I liked them and I found excuses to take them, so I'm not weaseling.")
[ Post Reply | Private Reply | To 1 | View Replies]

To: mathprof

At the very least, they should pass a law holding harmless from lawsuits Anti-spyware and Anti-virus companies who provide software to block or remove these rootkits.

When the evil Sony rootkit was discovered, a lot of software companies were afraid of offering cures for it for fear of being sued, because it's illegal to help anyone remove copy protection, according to an earlier stupid law that congress passed.

So, maybe they should just reverse that law blocking removal of copy protection, at least in the case of rootkits, and let the market work.

As for Sony, they have lost my respect. I used to think they were a good outfit. They are going to have a lot of image repair work to do after this.


5 posted on 02/20/2006 12:25:35 PM PST by Cicero (Marcus Tullius)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mathprof; Neil E. Wright; ShadowAce; backhoe; Jim Robinson; John Robinson; All
Click Here

6 posted on 02/20/2006 12:27:17 PM PST by Fiddlstix (Tagline Repair Service. Let us fix those broken Taglines. Inquire within(Presented by TagLines R US))
[ Post Reply | Private Reply | To 1 | View Replies]

To: RS

bump


7 posted on 02/20/2006 12:27:34 PM PST by A. Pole (Dzerzhinsky: There are no innocent people.There are only such who weren't examined in the proper way)
[ Post Reply | Private Reply | To 4 | View Replies]

To: ThinkDifferent

Because Sony pays more in taxes than Kevin Mitnick did.

Seriously, though, Sony's actions were already massively illegal and the exposure to criminal and civil penalties is not small, if there were a prosecutor and class-action lawyer with the guts and desire to take it to them.


8 posted on 02/20/2006 12:28:28 PM PST by thoughtomator
[ Post Reply | Private Reply | To 3 | View Replies]

To: RS
I'm always suspicious! Who are these people from Sysinternals and why should I trust them enough to run their software on my machine.

Sysinternals is probably quite legitimate and safe. However, I do not know and the first paragraph reflects the proper mindset to maintain a secure PC.
9 posted on 02/20/2006 12:28:39 PM PST by the_Watchman
[ Post Reply | Private Reply | To 4 | View Replies]

To: mathprof

I do hope they are made illegal.

In the meantime it should be company policy that no computer is allowed to play ANY sony CD in a company or gov computer or the computer of a government employee.

Just too security hazardous.


10 posted on 02/20/2006 12:33:18 PM PST by longtermmemmory (VOTE!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: the_Watchman
SysInternals is a very serious, hardcore and reputable site.  The guys who run it are Next Level Nerds and Whats-his-vich (I can never remember his name) writes for Microsoft Press.

Writes well, I might add.

The software at their site is a Must Have for administrators.

11 posted on 02/20/2006 12:33:33 PM PST by Psycho_Bunny
[ Post Reply | Private Reply | To 9 | View Replies]

To: rdb3; chance33_98; Calvinist_Dark_Lord; Bush2000; PenguinWry; GodGunsandGuts; CyberCowboy777; ...

12 posted on 02/20/2006 12:34:48 PM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mathprof; All
More Rookit Info Click Here

13 posted on 02/20/2006 12:36:44 PM PST by Fiddlstix (Tagline Repair Service. Let us fix those broken Taglines. Inquire within(Presented by TagLines R US))
[ Post Reply | Private Reply | To 1 | View Replies]

To: mathprof

But why is a new law needed and why is Sony not criminally liable under existing law??? After all, under DMCA, you're pretty much guilty if you've ever been in the same room with a computer, so just prosecute them under that. Oh, that's right, I forgot, DMCA doesn't apply to Sony since they paid for it.


14 posted on 02/20/2006 12:37:17 PM PST by Still Thinking (Disregard the law of unintended consequences at your own risk.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: mathprof

Leave it to Sony to come up with a way to violate your privacy, show their continued incompetance and piss off the Government all at the same time.

I don't buy their products for these reasons.


15 posted on 02/20/2006 12:38:31 PM PST by Leatherneck_MT (An honest man can feel no pleasure in the exercise of power over his fellow citizens.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: thoughtomator
Seriously, though, Sony's actions were already massively illegal and the exposure to criminal and civil penalties is not small, if there were a prosecutor and class-action lawyer with the guts and desire to take it to them.

It's high profile enough to interest Eliot Spitzer (spit!), but he has a policy only to work against the interest of the individual citizen.

16 posted on 02/20/2006 12:40:05 PM PST by Still Thinking (Disregard the law of unintended consequences at your own risk.)
[ Post Reply | Private Reply | To 8 | View Replies]

To: All
Sorry for the typo.....
I misspelled Rootkit.....
17 posted on 02/20/2006 12:40:05 PM PST by Fiddlstix (Tagline Repair Service. Let us fix those broken Taglines. Inquire within(Presented by TagLines R US))
[ Post Reply | Private Reply | To 13 | View Replies]

To: Psycho_Bunny

Mark Russinovich, IIRC.


18 posted on 02/20/2006 12:41:09 PM PST by Still Thinking (Disregard the law of unintended consequences at your own risk.)
[ Post Reply | Private Reply | To 11 | View Replies]

To: RS

bookmark


19 posted on 02/20/2006 12:42:43 PM PST by UCANSEE2 (and miles to go before I sleep.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: the_Watchman
"I'm always suspicious! Who are these people from Sysinternals and why should I trust them enough to run their software on my machine"

Excellent points - I've used their stuff, and it all seems to work well and not break anything, but you might want to google groups them for a consensus opinion - If I were you I wouldn't trust what I say either. :-)
20 posted on 02/20/2006 12:43:50 PM PST by RS ("I took the drugs because I liked them and I found excuses to take them, so I'm not weaseling.")
[ Post Reply | Private Reply | To 9 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-45 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson