[Dshield] Sony DRM CDs infect Macs, too

Anonymous Squirrel anonymous.squirrel at gmail.com
Fri Nov 11 01:57:07 GMT 2005


At least you need to put in the admin password, signalling you that
something is amiss (What?  I only wanted to play a song.  What is this
Sony stuff trying to do?) .

Does anyone know what the crippleware does?

On 11/10/05, Fergie <fergdawg at netzero.net> wrote:
> Via Boing Boing.
>
> [snip]
>
> Simon sez, "On Macintouch today, Darren Dittrich reports that Sony's DRM software targets Macs too. Digging into the "enhanced" content on the disk, he found a Start.app that, when run, shows a license agreement, then asks you for an admin password. On entering this, it installs two kernel extensions, PhoenixNub1.kext and PhoenixNub12.kext."
>
> Note that these aren't the rootkits that infect Windows PCs -- Sony's Mac crippleware comes from a different vendor called Suncomm.
>
> [snip]
>
> http://www.boingboing.net/2005/11/10/sony_music_cds_infec.html
>
> - ferg
>
>
> --
> "Fergie", a.k.a. Paul Ferguson
>  Engineering Architecture for the Internet
>  fergdawg at netzero.net or fergdawg at sbcglobal.net
>  ferg's tech blog: http://fergdawg.blogspot.com/
>
>
> _________________________________________
> Using .Net? Need to know more about .Net Security?
> http://isc.sans.org/banner_count.php?dest=dotnet
>
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
>



More information about the list mailing list