Sony does it again

[imported_LoKe]

Source

BOSTON (Reuters) - Software included with high-end memory sticks sold by Sony Corp <6758.T> can make personal computers vulnerable to attack by computer hackers, according to researchers with two Internet security firms.

Sony's MicroVault USB memory stick and fingerprint reader includes software that creates a hidden directory on the computer's hard drive, researchers with Finnish security software maker F-Secure Corp <FSC1V.HE> reported on the company's blog on Monday.

Such software that hides itself, which is known as a root kit, leaves room for hackers to secretly infect personal computers, they said.

Software that is installed on such hidden drives is not only invisible to the human eye; some types of computer security software are unable to detect viruses and other types of so-called malware, or malicious software, stored on them.

F-Secure's blog posting said it attempted to contact Sony before alerting the public about the software, but the company had not replied.

Sony spokesman Chisato Kitsukawa said he could not immediately comment on the situation.

On Tuesday, researchers with McAfee Inc. <MFE.N> said they had confirmed the vulnerability described by F-Secure.

"The apparent intent was to cloak sensitive files related to the fingerprint verification feature included on the USB drives," said McAfee spokesman Dave Marcus. "However, software creators apparently did not keep the security implications in mind. The application could be used to hide arbitrary software, including malicious software."

This is not the first time F-Secure has found Sony software installing hidden directories on the drives of its customers. In 2005 there was a similar situation involving the electronics maker's digital rights management software, security experts say.

F-Secure
Avert Labs

 

[Vinfinite]

Sony? sounds about right.

 

[nakedfrog]

Ooooo, I bet somebody's gettin' yelled at!

 

[Nik]

Good thing I don't buy Sony products anymore

 

[Quasmo]

GOOOOOO SONY!

 

[imported_LoKe]

Originally posted by: GuideBot
Good thing I don't buy Sony products anymore

I still buy Sony speakers and receivers for my dad (he's still a Sony fan), but I won't connect any piece of Sony hardware to my computer.

 

[Demon-Xanth]

You know, the concept of you owning your PC has become lost.

 

[KeithTalent]

Crap, I just bought one for my Father-in-Law a little while back as a birthday present. Anyone know if it will infect a Mac?

KT

 

[thepd7]

Originally posted by: KeithTalent
Crap, I just bought one for my Father-in-Law a little while back as a birthday present. Anyone know if it will infect a Mac?

KT

Haven't you seen the commercials? Nothing can infect a Mac!!!

 

[Rubycon]

Sony: Oops! I did it again! :laugh:

 

[NikolaeVarius]

You know, I hate the software, but Sony hardware is amazing. It seems that everything I buy from them is quality. So I still stick with Sony..

 

[KeithTalent]

Originally posted by: thepd7

Originally posted by: KeithTalent
Crap, I just bought one for my Father-in-Law a little while back as a birthday present. Anyone know if it will infect a Mac?

KT

Haven't you seen the commercials? Nothing can infect a Mac!!!

Well I hope that's true. I don't want to go have to tell him I gave him a disease, even if it was unintentional.

KT

 

[mb]

Originally posted by: Demon-Xanth
You know, the concept of you owning your PC has become lost.

All your PCs are belong to Sony.

 

[biggestmuff]

And people in the tech community STILL support this company.

 

[sdifox]

Originally posted by: tenshodo13
You know, I hate the software, but Sony hardware is amazing. It seems that everything I buy from them is quality. So I still stick with Sony..

You forgot the <sarcasm></sarcasm> tags...

 

[Demon-Xanth]

Originally posted by: tenshodo13
You know, I hate the software, but Sony hardware is amazing. It seems that everything I buy from them is quality. So I still stick with Sony..

*throws PS2 that got sent back for service twice, his slim PS2 that arrived DOA, and a DVD-RW that no longer reads CDs*

Sony's high end used to be good, but even they've falled to crap status lately.

 

[ryan256]

Originally posted by: GuideBot
Good thing I don't buy Sony products anymore

QFFT!

 

[Exterous]

No...not from a company like Sony! Nary a bad word spoken about them!

 

[MrWizzard]

Originally posted by: thepd7

Originally posted by: KeithTalent
Crap, I just bought one for my Father-in-Law a little while back as a birthday present. Anyone know if it will infect a Mac?

KT

Haven't you seen the commercials? Nothing can infect a Mac!!!

Yea what is the point of breaking something thats already broke....

 

[Zenmervolt]

So basically, the software creates a hidden directory (just like WindowsUpdate does for its uninstall files, and just like Windows uses to manage data in user profiles) because they don't want people mucking about in the portion of their program that validates the fingerprints and potentially making their card insecure.

The article is wrong, it's not a "Root Kit" since it doesn't give them any "Root" level access to your computer. It's just a hidden directory like numerous other hidden directories that come in a standard windows install. There are dozens of hidden folders in an average Windows install. Singling out Sony in this case is just jumping on the bandwagon.

Besides, anyone who doesn't set up their anti-virus to scan hidden and system directories is foolish anyway.

ZV

 

[Vette73]

Originally posted by: sdifox

Originally posted by: tenshodo13
You know, I hate the software, but Sony hardware is amazing. It seems that everything I buy from them is quality. So I still stick with Sony..

You forgot the <sarcasm></sarcasm> tags...

Yep. The days of Sony being some huge class leader have passed. Some of their TVs are still good but not the best and when you take into account price they don;t even hit top 10 on my list.

 

[CKent]

Originally posted by: tenshodo13
You know, I hate the software, but Sony hardware is amazing. It seems that everything I buy from them is quality. So I still stick with Sony..

I've had the opposite experience with their products, every one of them has been a pile of crap. I stopped buying their stuff due to this, many years before they started in with rootkits, DRM, ridiculously stupid playstation management and MMORPG ruination via their online entertainment division. What a scumbag of a company.

 

[ManBearPig]

Originally posted by: Demon-Xanth
You know, the concept of you owning your PC has become lost.

 

[Rubycon]

Sony take that!

 

[ISAslot]

Originally posted by: Zenmervolt
So basically, the software creates a hidden directory (just like WindowsUpdate does for its uninstall files, and just like Windows uses to manage data in user profiles) because they don't want people mucking about in the portion of their program that validates the fingerprints and potentially making their card insecure.

The article is wrong, it's not a "Root Kit" since it doesn't give them any "Root" level access to your computer. It's just a hidden directory like numerous other hidden directories that come in a standard windows install. There are dozens of hidden folders in an average Windows install. Singling out Sony in this case is just jumping on the bandwagon.

Besides, anyone who doesn't set up their anti-virus to scan hidden and system directories is foolish anyway.

ZV

They're not using windows 'hidden files'. They're adding a file system driver filter. http://www.avertlabs.com/resea...-me-sony-one-more-time