[Dshield] Sony DRM CDs infect Macs, too
adam at moosoft.net
Fri Nov 11 13:04:11 GMT 2005
Unfortunately many users will simply enter the password without
questioning why it is asking.
On 11 Nov 2005, at 01:57, Anonymous Squirrel wrote:
> At least you need to put in the admin password, signalling you that
> something is amiss (What? I only wanted to play a song. What is this
> Sony stuff trying to do?) .
> Does anyone know what the crippleware does?
> On 11/10/05, Fergie <fergdawg at netzero.net> wrote:
>> Via Boing Boing.
>> Simon sez, "On Macintouch today, Darren Dittrich reports that
>> Sony's DRM software targets Macs too. Digging into the "enhanced"
>> content on the disk, he found a Start.app that, when run, shows a
>> license agreement, then asks you for an admin password. On
>> entering this, it installs two kernel extensions, PhoenixNub1.kext
>> and PhoenixNub12.kext."
>> Note that these aren't the rootkits that infect Windows PCs --
>> Sony's Mac crippleware comes from a different vendor called Suncomm.
>> - ferg
>> "Fergie", a.k.a. Paul Ferguson
>> Engineering Architecture for the Internet
>> fergdawg at netzero.net or fergdawg at sbcglobal.net
>> ferg's tech blog: http://fergdawg.blogspot.com/
>> Using .Net? Need to know more about .Net Security?
>> send all posts to list at lists.dshield.org
>> To change your subscription options (or unsubscribe), see: http://
> Using .Net? Need to know more about .Net Security?
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http://
Adam McMaster <adam at moosoft.net>
More information about the list