[Dshield] Sony DRM CDs infect Macs, too

Adam McMaster adam at moosoft.net
Fri Nov 11 13:04:11 GMT 2005


Unfortunately many users will simply enter the password without  
questioning why it is asking.

On 11 Nov 2005, at 01:57, Anonymous Squirrel wrote:

> At least you need to put in the admin password, signalling you that
> something is amiss (What?  I only wanted to play a song.  What is this
> Sony stuff trying to do?) .
>
> Does anyone know what the crippleware does?
>
> On 11/10/05, Fergie <fergdawg at netzero.net> wrote:
>> Via Boing Boing.
>>
>> [snip]
>>
>> Simon sez, "On Macintouch today, Darren Dittrich reports that  
>> Sony's DRM software targets Macs too. Digging into the "enhanced"  
>> content on the disk, he found a Start.app that, when run, shows a  
>> license agreement, then asks you for an admin password. On  
>> entering this, it installs two kernel extensions, PhoenixNub1.kext  
>> and PhoenixNub12.kext."
>>
>> Note that these aren't the rootkits that infect Windows PCs --  
>> Sony's Mac crippleware comes from a different vendor called Suncomm.
>>
>> [snip]
>>
>> http://www.boingboing.net/2005/11/10/sony_music_cds_infec.html
>>
>> - ferg
>>
>>
>> --
>> "Fergie", a.k.a. Paul Ferguson
>>  Engineering Architecture for the Internet
>>  fergdawg at netzero.net or fergdawg at sbcglobal.net
>>  ferg's tech blog: http://fergdawg.blogspot.com/
>>
>>
>> _________________________________________
>> Using .Net? Need to know more about .Net Security?
>> http://isc.sans.org/banner_count.php?dest=dotnet
>>
>> _______________________________________________
>> send all posts to list at lists.dshield.org
>> To change your subscription options (or unsubscribe), see: http:// 
>> www.dshield.org/mailman/listinfo/list
>>
>
> _________________________________________
> Using .Net? Need to know more about .Net Security?
> http://isc.sans.org/banner_count.php?dest=dotnet
>
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http:// 
> www.dshield.org/mailman/listinfo/list


-- 
Adam McMaster <adam at moosoft.net>




More information about the list mailing list