Thursday, November 23, 2006
I want a Sony Rootkit
Since everybody seemed to be talking about it, I was getting more and more curious. Yes, I would like to check it out for myself. But, I do not like to admit it, I do not have a Sony rootkit for my private experiments. So I started a small enquiry among my friends: Nope, nobody has one. Nevertheless, I got the advice: "Buy a CD from Sony with the label xyz on it".
Since I am not the type of guy who just buys a CD without knowing anything about the music it contains, I decided to do some research on the internet. Starting out with Mark Russinovich's famous blog, I dug deeper. By the way, reading Mark's blog is really a treat not to be missed. Very fine analysis and still full of suspense, even now a year later. Sony, Rootkits and Digital Rights Management Gone Too Far
There is also an interesting observation from Kaminsky about using DNS to detect the rootkit in the network. http://www.doxpara.com/
At last I found a list at the EFF which CDs contain the rootkit.
First, it has only been published in the US, so I would not have too much luck in a record store in Munich. Second, there are just 20 CDs from all genres, but not from an artist I would like.
So, nothing in hand and nothing in sight. If you happen to have one...
Comments: Post a Comment